# Flog Txt Version 1
# Analyzer Version: 3.2.2
# Analyzer Build Date: Jun  3 2020 08:38:37
# Log Creation Date: 17.11.2020 22:22:26.959

Process:
	id = "1"
	image_name = "svswdhwjrxfzuxui.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\svswdhwjrxfzuxui.exe"
	page_root = "0x4717f000"
	os_pid = "0x6f4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x454"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sVSwdhWJRXFZUXuI.exe\" "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0x6fc

	[0055.906] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2cfb5c | out: lpSystemTimeAsFileTime=0x2cfb5c*(dwLowDateTime=0x3d9fd0a0, dwHighDateTime=0x1d6bd30)) 
	[0055.906] GetCurrentThreadId () returned 0x6fc
	[0055.906] GetCurrentProcessId () returned 0x6f4
	[0055.906] QueryPerformanceCounter (in: lpPerformanceCount=0x2cfb54 | out: lpPerformanceCount=0x2cfb54*=17617063851) returned 1
	[0055.921] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0055.921] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0055.921] GetLastError () returned 0x57
	[0055.921] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0055.921] GetLastError () returned 0x57
	[0055.921] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76d30000
	[0055.922] GetProcAddress (hModule=0x76d30000, lpProcName="InitializeCriticalSectionEx") returned 0x76d44d28
	[0055.922] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0055.922] GetLastError () returned 0x57
	[0055.922] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b
	[0055.922] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208
	[0055.922] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0
	[0055.923] GetLastError () returned 0x57
	[0055.923] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x75650000
	[0055.930] GetProcAddress (hModule=0x75650000, lpProcName="InitializeCriticalSectionEx") returned 0x0
	[0055.931] GetProcessHeap () returned 0x5f0000
	[0055.931] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0055.931] GetLastError () returned 0x57
	[0055.931] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0055.936] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0
	[0055.936] GetLastError () returned 0x57
	[0055.936] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76d30000
	[0055.936] GetProcAddress (hModule=0x76d30000, lpProcName="FlsAlloc") returned 0x76d44f2b
	[0055.936] GetLastError () returned 0x57
	[0055.936] GetProcAddress (hModule=0x76d30000, lpProcName="FlsGetValue") returned 0x76d41252
	[0055.936] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x364) returned 0x605b50
	[0055.936] GetProcAddress (hModule=0x76d30000, lpProcName="FlsSetValue") returned 0x76d44208
	[0055.937] SetLastError (dwErrCode=0x57) 
	[0055.937] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xc00) returned 0x605ec0
	[0055.939] GetStartupInfoW (in: lpStartupInfo=0x2cfa90 | out: lpStartupInfo=0x2cfa90*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sVSwdhWJRXFZUXuI.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xdf11d0, hStdOutput=0x268a3043, hStdError=0xfffffffe)) 
	[0055.939] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3
	[0055.939] GetFileType (hFile=0x3) returned 0x2
	[0055.939] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
	[0055.939] GetFileType (hFile=0x7) returned 0x2
	[0055.939] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb
	[0055.939] GetFileType (hFile=0xb) returned 0x2
	[0055.940] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sVSwdhWJRXFZUXuI.exe\" "
	[0055.940] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sVSwdhWJRXFZUXuI.exe\" "
	[0055.940] GetLastError () returned 0x57
	[0055.940] SetLastError (dwErrCode=0x57) 
	[0055.940] GetLastError () returned 0x57
	[0055.940] SetLastError (dwErrCode=0x57) 
	[0055.940] GetACP () returned 0x4e4
	[0055.940] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x220) returned 0x605008
	[0055.940] IsValidCodePage (CodePage=0x4e4) returned 1
	[0055.940] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x2cfac0 | out: lpCPInfo=0x2cfac0) returned 1
	[0055.940] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x2cf388 | out: lpCPInfo=0x2cf388) returned 1
	[0055.940] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2cf99c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0055.940] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2cf99c, cbMultiByte=256, lpWideCharStr=0x2cf128, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ띱ßĀ") returned 256
	[0055.941] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ띱ßĀ", cchSrc=256, lpCharType=0x2cf39c | out: lpCharType=0x2cf39c) returned 1
	[0055.941] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2cf99c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0055.941] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2cf99c, cbMultiByte=256, lpWideCharStr=0x2cf0d8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쏀ßĀ") returned 256
	[0055.941] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0
	[0055.941] GetLastError () returned 0x57
	[0055.941] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0
	[0055.942] GetProcAddress (hModule=0x76d30000, lpProcName="LCMapStringEx") returned 0x76dc47f1
	[0055.942] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쏀ßĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0055.942] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쏀ßĀ", cchSrc=256, lpDestStr=0x2ceec8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
	[0055.942] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x2cf89c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿócF&Øú,", lpUsedDefaultChar=0x0) returned 256
	[0055.942] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2cf99c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0055.942] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2cf99c, cbMultiByte=256, lpWideCharStr=0x2cf0f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
	[0055.942] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0055.942] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x2ceee8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
	[0055.942] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x2cf79c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿócF&Øú,", lpUsedDefaultChar=0x0) returned 256
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x605230
	[0055.943] GetModuleFileNameA (in: hModule=0x0, lpFilename=0xe0d4e0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sVSwdhWJRXFZUXuI.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\svswdhwjrxfzuxui.exe")) returned 0x3a
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x43) returned 0x6072c8
	[0055.943] RtlInitializeSListHead (in: ListHead=0xe0d0e8 | out: ListHead=0xe0d0e8) 
	[0055.943] GetLastError () returned 0x0
	[0055.943] SetLastError (dwErrCode=0x0) 
	[0055.943] GetEnvironmentStringsW () returned 0x607318*
	[0055.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x565) returned 0x607df0
	[0055.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x607df0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381
	[0055.943] FreeEnvironmentStringsW (penv=0x607318) returned 1
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x98) returned 0x607318
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x1f) returned 0x606d88
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x36) returned 0x6073b8
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x37) returned 0x6073f8
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x3c) returned 0x607438
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x31) returned 0x607480
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x17) returned 0x6052b8
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x24) returned 0x6074c0
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x14) returned 0x6074f0
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xd) returned 0x603018
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x25) returned 0x607510
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x39) returned 0x607540
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x18) returned 0x607588
	[0055.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x17) returned 0x6075a8
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xe) returned 0x603030
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x69) returned 0x6075c8
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x3e) returned 0x608378
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x1b) returned 0x606db0
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x1d) returned 0x606dd8
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x48) returned 0x607640
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x12) returned 0x607690
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x18) returned 0x6076b0
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x1b) returned 0x606e00
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x24) returned 0x6076d0
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x29) returned 0x607700
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x1e) returned 0x606e28
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x41) returned 0x607738
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x17) returned 0x607788
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xf) returned 0x603048
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x16) returned 0x6077a8
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x2a) returned 0x6077c8
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x29) returned 0x607800
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x15) returned 0x607838
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x1e) returned 0x606e50
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x2a) returned 0x607858
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x12) returned 0x607890
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x18) returned 0x6078b0
	[0055.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x46) returned 0x6078d0
	[0055.944] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x607df0 | out: hHeap=0x5f0000) returned 1
	[0055.945] GetModuleHandleW (lpModuleName="api-ms-win-core-synch-l1-2-0.dll") returned 0x75650000
	[0055.945] GetProcAddress (hModule=0x75650000, lpProcName="InitializeConditionVariable") returned 0x77c78456
	[0055.945] GetProcAddress (hModule=0x75650000, lpProcName="SleepConditionVariableCS") returned 0x76dc4b32
	[0055.945] GetProcAddress (hModule=0x75650000, lpProcName="WakeAllConditionVariable") returned 0x77ca409d
	[0055.945] RtlInitializeConditionVariable () returned 0xe0d0c8
	[0055.945] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x800) returned 0x607920
	[0055.945] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
	[0055.945] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xdf0bbb) returned 0x0
	[0055.945] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x608128
	[0055.945] CryptAcquireContextW (in: phProv=0x2cf444, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x2cf444*=0x608220) returned 1
	[0056.886] CryptGenRandom (in: hProv=0x608220, dwLen=0x80, pbBuffer=0x2cf458 | out: pbBuffer=0x2cf458) returned 1
	[0056.886] CryptReleaseContext (hProv=0x608220, dwFlags=0x0) returned 1
	[0056.886] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc) returned 0x603108
	[0056.886] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x608408
	[0056.886] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x34) returned 0x609938
	[0056.886] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x78) returned 0x5ff5f8
	[0056.886] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x608498
	[0056.886] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x608408 | out: hHeap=0x5f0000) returned 1
	[0056.886] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x603108 | out: hHeap=0x5f0000) returned 1
	[0056.887] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x38) returned 0x609978
	[0056.887] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x800) returned 0x60a828
	[0056.887] GetKeyboardLayoutList (in: nBuff=512, lpList=0x60a828 | out: lpList=0x60a828) returned 1
	[0056.887] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x60a828 | out: hHeap=0x5f0000) returned 1
	[0056.887] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x609978 | out: hHeap=0x5f0000) returned 1
	[0056.887] GetCurrentThreadId () returned 0x6fc
	[0056.887] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x1000) returned 0x60a828
	[0056.887] GetLastError () returned 0x0
	[0056.887] SetLastError (dwErrCode=0x0) 
	[0056.887] GetLastError () returned 0x0
	[0056.887] SetLastError (dwErrCode=0x0) 
	[0056.887] WriteFile (in: hFile=0x7, lpBuffer=0x2cd700*, nNumberOfBytesToWrite=0x21, lpNumberOfBytesWritten=0x2cd6f8, lpOverlapped=0x0 | out: lpBuffer=0x2cd700*, lpNumberOfBytesWritten=0x2cd6f8*=0x21, lpOverlapped=0x0) returned 1
	[0056.889] CoInitialize (pvReserved=0x0) returned 0x0
	[0057.425] GetCurrentThreadId () returned 0x6fc
	[0057.425] GetLastError () returned 0x0
	[0057.425] SetLastError (dwErrCode=0x0) 
	[0057.425] GetLastError () returned 0x0
	[0057.425] SetLastError (dwErrCode=0x0) 
	[0057.425] WriteFile (in: hFile=0x7, lpBuffer=0x2cd700*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x2cd6f8, lpOverlapped=0x0 | out: lpBuffer=0x2cd700*, lpNumberOfBytesWritten=0x2cd6f8*=0x23, lpOverlapped=0x0) returned 1
	[0057.426] SetErrorMode (uMode=0x1) returned 0x0
	[0057.426] GetCurrentThreadId () returned 0x6fc
	[0057.426] GetLastError () returned 0x0
	[0057.426] SetLastError (dwErrCode=0x0) 
	[0057.426] GetLastError () returned 0x0
	[0057.426] SetLastError (dwErrCode=0x0) 
	[0057.426] WriteFile (in: hFile=0x7, lpBuffer=0x2cd700*, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0x2cd6f8, lpOverlapped=0x0 | out: lpBuffer=0x2cd700*, lpNumberOfBytesWritten=0x2cd6f8*=0x2c, lpOverlapped=0x0) returned 1
	[0057.426] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="HelloKittyMutex") returned 0x0
	[0057.426] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="HelloKittyMutex") returned 0xc4
	[0057.427] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="02") returned 2
	[0057.428] lstrcatA (in: lpString1="", lpString2="02" | out: lpString1="02") returned="02"
	[0057.428] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="f6") returned 2
	[0057.428] lstrcatA (in: lpString1="02", lpString2="f6" | out: lpString1="02f6") returned="02f6"
	[0057.428] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="af") returned 2
	[0057.428] lstrcatA (in: lpString1="02f6", lpString2="af" | out: lpString1="02f6af") returned="02f6af"
	[0057.428] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="25") returned 2
	[0057.428] lstrcatA (in: lpString1="02f6af", lpString2="25" | out: lpString1="02f6af25") returned="02f6af25"
	[0057.428] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="06") returned 2
	[0057.428] lstrcatA (in: lpString1="02f6af25", lpString2="06" | out: lpString1="02f6af2506") returned="02f6af2506"
	[0057.428] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="49") returned 2
	[0057.428] lstrcatA (in: lpString1="02f6af2506", lpString2="49" | out: lpString1="02f6af250649") returned="02f6af250649"
	[0057.428] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="55") returned 2
	[0057.428] lstrcatA (in: lpString1="02f6af250649", lpString2="55" | out: lpString1="02f6af25064955") returned="02f6af25064955"
	[0057.428] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="5e") returned 2
	[0057.428] lstrcatA (in: lpString1="02f6af25064955", lpString2="5e" | out: lpString1="02f6af250649555e") returned="02f6af250649555e"
	[0057.428] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="a1") returned 2
	[0057.428] lstrcatA (in: lpString1="02f6af250649555e", lpString2="a1" | out: lpString1="02f6af250649555ea1") returned="02f6af250649555ea1"
	[0057.428] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="b6") returned 2
	[0057.428] lstrcatA (in: lpString1="02f6af250649555ea1", lpString2="b6" | out: lpString1="02f6af250649555ea1b6") returned="02f6af250649555ea1b6"
	[0057.428] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="5f") returned 2
	[0057.428] lstrcatA (in: lpString1="02f6af250649555ea1b6", lpString2="5f" | out: lpString1="02f6af250649555ea1b65f") returned="02f6af250649555ea1b65f"
	[0057.428] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="20") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f", lpString2="20" | out: lpString1="02f6af250649555ea1b65f20") returned="02f6af250649555ea1b65f20"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="fd") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20", lpString2="fd" | out: lpString1="02f6af250649555ea1b65f20fd") returned="02f6af250649555ea1b65f20fd"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="9e") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd", lpString2="9e" | out: lpString1="02f6af250649555ea1b65f20fd9e") returned="02f6af250649555ea1b65f20fd9e"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="81") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e", lpString2="81" | out: lpString1="02f6af250649555ea1b65f20fd9e81") returned="02f6af250649555ea1b65f20fd9e81"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="5b") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e81", lpString2="5b" | out: lpString1="02f6af250649555ea1b65f20fd9e815b") returned="02f6af250649555ea1b65f20fd9e815b"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="23") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b", lpString2="23" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23") returned="02f6af250649555ea1b65f20fd9e815b23"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="ba") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23", lpString2="ba" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba") returned="02f6af250649555ea1b65f20fd9e815b23ba"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="7d") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba", lpString2="7d" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d") returned="02f6af250649555ea1b65f20fd9e815b23ba7d"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="84") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d", lpString2="84" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84") returned="02f6af250649555ea1b65f20fd9e815b23ba7d84"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="82") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84", lpString2="82" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d8482") returned="02f6af250649555ea1b65f20fd9e815b23ba7d8482"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="9b") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d8482", lpString2="9b" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b") returned="02f6af250649555ea1b65f20fd9e815b23ba7d84829b"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="93") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b", lpString2="93" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93") returned="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="e6") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93", lpString2="e6" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6") returned="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="d8") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6", lpString2="d8" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8") returned="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="db") returned 2
	[0057.429] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8", lpString2="db" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8db") returned="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8db"
	[0057.429] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="db") returned 2
	[0057.430] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8db", lpString2="db" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb") returned="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb"
	[0057.430] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="10") returned 2
	[0057.430] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb", lpString2="10" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10") returned="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10"
	[0057.430] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="f8") returned 2
	[0057.430] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10", lpString2="f8" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f8") returned="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f8"
	[0057.430] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="2c") returned 2
	[0057.430] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f8", lpString2="2c" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f82c") returned="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f82c"
	[0057.430] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="5a") returned 2
	[0057.430] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f82c", lpString2="5a" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f82c5a") returned="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f82c5a"
	[0057.430] wnsprintfA (in: pszDest=0x2cf1f0, cchDest=32, pszFmt="%02x" | out: pszDest="f4") returned 2
	[0057.430] lstrcatA (in: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f82c5a", lpString2="f4" | out: lpString1="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f82c5af4") returned="02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f82c5af4"
	[0057.430] lstrlenW (lpString="Hello dear user.\r\nYour files have been encrypted.\r\n\r\n-- What does it mean?!\r\nContent of your files have been modified. Without special key you can't undo that operation.\r\n\r\n-- How to get special key?\r\nIf you want to get it, you must pay us some money and we will help you.\r\nWe will give you special decryption program and instructions.\r\n\r\n-- Ok, how i can pay you?\r\n1) Download TOR browser, if you don't know how to do it you can google it.\r\n2) Open this website in tor browser: %s/%S\r\n3) Follow instructions in chat. \r\n") returned 520
	[0057.430] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x820) returned 0x6101d0
	[0057.430] wsprintfW (in: param_1=0x6101d0, param_2="Hello dear user.\r\nYour files have been encrypted.\r\n\r\n-- What does it mean?!\r\nContent of your files have been modified. Without special key you can't undo that operation.\r\n\r\n-- How to get special key?\r\nIf you want to get it, you must pay us some money and we will help you.\r\nWe will give you special decryption program and instructions.\r\n\r\n-- Ok, how i can pay you?\r\n1) Download TOR browser, if you don't know how to do it you can google it.\r\n2) Open this website in tor browser: %s/%S\r\n3) Follow instructions in chat. \r\n" | out: param_1="Hello dear user.\r\nYour files have been encrypted.\r\n\r\n-- What does it mean?!\r\nContent of your files have been modified. Without special key you can't undo that operation.\r\n\r\n-- How to get special key?\r\nIf you want to get it, you must pay us some money and we will help you.\r\nWe will give you special decryption program and instructions.\r\n\r\n-- Ok, how i can pay you?\r\n1) Download TOR browser, if you don't know how to do it you can google it.\r\n2) Open this website in tor browser: http://6x7dp6h3w6q3ugjv4yv5gycj3femb24kysgry5b44hhgfwc5ml5qrdad.onion/02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f82c5af4\r\n3) Follow instructions in chat. \r\n") returned 649
	[0057.430] lstrlenW (lpString="Hello dear user.\r\nYour files have been encrypted.\r\n\r\n-- What does it mean?!\r\nContent of your files have been modified. Without special key you can't undo that operation.\r\n\r\n-- How to get special key?\r\nIf you want to get it, you must pay us some money and we will help you.\r\nWe will give you special decryption program and instructions.\r\n\r\n-- Ok, how i can pay you?\r\n1) Download TOR browser, if you don't know how to do it you can google it.\r\n2) Open this website in tor browser: http://6x7dp6h3w6q3ugjv4yv5gycj3femb24kysgry5b44hhgfwc5ml5qrdad.onion/02f6af250649555ea1b65f20fd9e815b23ba7d84829b93e6d8dbdb10f82c5af4\r\n3) Follow instructions in chat. \r\n") returned 649
	[0057.430] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x520) returned 0x6109f8
	[0057.430] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6101d0 | out: hHeap=0x5f0000) returned 1
	[0057.430] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sVSwdhWJRXFZUXuI.exe\" "
	[0057.430] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sVSwdhWJRXFZUXuI.exe\" ", pNumArgs=0x2cf138 | out: pNumArgs=0x2cf138) returned 0x610f20*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sVSwdhWJRXFZUXuI.exe"
	[0057.430] GetSystemTime (in: lpSystemTime=0x2cf150 | out: lpSystemTime=0x2cf150*(wYear=0x7e4, wMonth=0xb, wDayOfWeek=0x2, wDay=0x11, wHour=0x16, wMinute=0x17, wSecond=0xe, wMilliseconds=0x229)) 
	[0057.430] SystemTimeToFileTime (in: lpSystemTime=0x2cf150, lpFileTime=0x2cf148 | out: lpFileTime=0x2cf148) returned 1
	[0057.430] GetCurrentThreadId () returned 0x6fc
	[0057.431] GetLastError () returned 0x0
	[0057.431] SetLastError (dwErrCode=0x0) 
	[0057.431] GetLastError () returned 0x0
	[0057.431] SetLastError (dwErrCode=0x0) 
	[0057.431] WriteFile (in: hFile=0x7, lpBuffer=0x2cd700*, nNumberOfBytesToWrite=0x1c, lpNumberOfBytesWritten=0x2cd6f8, lpOverlapped=0x0 | out: lpBuffer=0x2cd700*, lpNumberOfBytesWritten=0x2cd6f8*=0x1c, lpOverlapped=0x0) returned 1
	[0057.431] GetCurrentThreadId () returned 0x6fc
	[0057.431] GetLastError () returned 0x0
	[0057.431] SetLastError (dwErrCode=0x0) 
	[0057.432] GetLastError () returned 0x0
	[0057.432] SetLastError (dwErrCode=0x0) 
	[0057.432] WriteFile (in: hFile=0x7, lpBuffer=0x2cd680*, nNumberOfBytesToWrite=0x21, lpNumberOfBytesWritten=0x2cd678, lpOverlapped=0x0 | out: lpBuffer=0x2cd680*, lpNumberOfBytesWritten=0x2cd678*=0x21, lpOverlapped=0x0) returned 1
	[0057.432] GetSystemInfo (in: lpSystemInfo=0x2cf0bc | out: lpSystemInfo=0x2cf0bc*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) 
	[0057.432] GetCurrentThreadId () returned 0x6fc
	[0057.432] GetLastError () returned 0x0
	[0057.432] SetLastError (dwErrCode=0x0) 
	[0057.432] GetLastError () returned 0x0
	[0057.432] SetLastError (dwErrCode=0x0) 
	[0057.432] WriteFile (in: hFile=0x7, lpBuffer=0x2cd678*, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0x2cd670, lpOverlapped=0x0 | out: lpBuffer=0x2cd678*, lpNumberOfBytesWritten=0x2cd670*=0x2b, lpOverlapped=0x0) returned 1
	[0057.433] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0x8) returned 0xc8
	[0057.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xde9a70, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc
	[0057.434] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x4) returned 0x608330
	[0057.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xde9a70, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0
	[0057.435] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8) returned 0x608340
	[0057.435] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x608330 | out: hHeap=0x5f0000) returned 1
	[0057.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xde9a70, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4
	[0057.436] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc) returned 0x603198
	[0057.436] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x608340 | out: hHeap=0x5f0000) returned 1
	[0057.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xde9a70, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8
	[0057.436] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x10) returned 0x6031b0
	[0057.437] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x603198 | out: hHeap=0x5f0000) returned 1
	[0057.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xde9a70, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc
	[0057.437] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x18) returned 0x609bb8
	[0057.437] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6031b0 | out: hHeap=0x5f0000) returned 1
	[0057.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xde9a70, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0
	[0057.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xde9a70, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4
	[0057.439] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x24) returned 0x608330
	[0057.439] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x609bb8 | out: hHeap=0x5f0000) returned 1
	[0057.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xde9a70, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8
	[0057.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xdeb140, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec
	[0057.441] CoCreateInstance (in: rclsid=0xe024fc*(Data1=0x674b6698, Data2=0xee92, Data3=0x11d0, Data4=([0]=0xad, [1]=0x71, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd8, [6]=0xfd, [7]=0xff)), pUnkOuter=0x0, dwClsContext=0x1, riid=0xe0245c*(Data1=0x44aca674, Data2=0xe8fc, Data3=0x11d0, Data4=([0]=0xa0, [1]=0x7c, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppv=0x2cf098 | out: ppv=0x2cf098*=0x2e5c660) returned 0x0
	[0059.674] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76d30000
	[0059.674] GetProcAddress (hModule=0x76d30000, lpProcName="IsWow64Process") returned 0x76d4195e
	[0059.674] GetCurrentProcess () returned 0xffffffff
	[0059.674] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x2cf0a4 | out: Wow64Process=0x2cf0a4) returned 1
	[0059.675] WbemContext:IWbemContext:SetValue (This=0x2e5c660, wszName="__ProviderArchitecture", lFlags=0, pValue=0x2cf078*(varType=0x3, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x40, varVal2=0x0)) returned 0x0
	[0059.675] CoCreateInstance (in: rclsid=0xe024ec*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x4401, riid=0xe0241c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x2cf090 | out: ppv=0x2cf090*=0x2e5c730) returned 0x0
	[0059.883] WbemLocator:IWbemLocator:ConnectServer (in: This=0x2e5c730, strNetworkResource="ROOT\\cimv2", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=0, strAuthority=0x0, pCtx=0x2e5c660, ppNamespace=0x2cf09c | out: ppNamespace=0x2cf09c*=0x2e5cfdc) returned 0x0
	[0069.180] CoSetProxyBlanket (pProxy=0x2e5cfdc, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x3, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0
	[0069.181] IWbemServices:ExecQuery (in: This=0x2e5cfdc, strQueryLanguage="WQL", strQuery="select * from Win32_ShadowCopy", lFlags=48, pCtx=0x0, ppEnum=0x2cf094 | out: ppEnum=0x2cf094*=0x2e5d07c) returned 0x0
	[0069.188] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0071.543] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x40, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{4FE73A95-BB7F-48F7-BF4C-A89DCEB97CC9}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0071.543] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{4FE73A95-BB7F-48F7-BF4C-A89DCEB97CC9}'") returned 60
	[0071.545] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{4FE73A95-BB7F-48F7-BF4C-A89DCEB97CC9}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0073.895] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0073.895] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0074.011] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62dd1c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{43A11862-374F-4B42-8013-C8A59B8690F4}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0074.011] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{43A11862-374F-4B42-8013-C8A59B8690F4}'") returned 60
	[0074.011] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{43A11862-374F-4B42-8013-C8A59B8690F4}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0075.243] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0075.243] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0075.245] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de0c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{84D74FA3-DE98-47B0-806B-7C5805D67A02}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0075.245] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{84D74FA3-DE98-47B0-806B-7C5805D67A02}'") returned 60
	[0075.246] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{84D74FA3-DE98-47B0-806B-7C5805D67A02}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0077.931] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0077.931] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0077.933] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de94, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{1D028705-A254-45DE-BE10-D22FA08DBB3A}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0077.933] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{1D028705-A254-45DE-BE10-D22FA08DBB3A}'") returned 60
	[0077.933] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{1D028705-A254-45DE-BE10-D22FA08DBB3A}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0079.164] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0079.164] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0079.169] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de0c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{51FFEAE1-0810-4889-92A9-E72417EBFA41}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0079.169] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{51FFEAE1-0810-4889-92A9-E72417EBFA41}'") returned 60
	[0079.169] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{51FFEAE1-0810-4889-92A9-E72417EBFA41}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0080.320] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0080.321] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0080.323] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de94, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{2C8AB63D-F2CE-4F84-96CE-B33DC539136D}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0080.323] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{2C8AB63D-F2CE-4F84-96CE-B33DC539136D}'") returned 60
	[0080.323] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{2C8AB63D-F2CE-4F84-96CE-B33DC539136D}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0081.412] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0081.412] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0081.413] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de0c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{E1ADED26-A00D-489F-A2D1-21A5F0FDF97C}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0081.413] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{E1ADED26-A00D-489F-A2D1-21A5F0FDF97C}'") returned 60
	[0081.413] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{E1ADED26-A00D-489F-A2D1-21A5F0FDF97C}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0082.620] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0082.620] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0082.622] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de94, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{05121166-67F2-4EA9-83D8-EDC08F680DA7}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0082.622] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{05121166-67F2-4EA9-83D8-EDC08F680DA7}'") returned 60
	[0082.622] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{05121166-67F2-4EA9-83D8-EDC08F680DA7}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0085.693] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0085.694] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0085.695] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de0c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{AACD2EA4-29A9-4B07-A4A9-1320561DEC2F}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0085.695] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{AACD2EA4-29A9-4B07-A4A9-1320561DEC2F}'") returned 60
	[0085.695] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{AACD2EA4-29A9-4B07-A4A9-1320561DEC2F}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0087.064] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0087.064] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0087.066] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de94, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{7199C78C-6563-4398-B813-4A3F86995AEC}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0087.066] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{7199C78C-6563-4398-B813-4A3F86995AEC}'") returned 60
	[0087.066] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{7199C78C-6563-4398-B813-4A3F86995AEC}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0088.689] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0088.689] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0088.693] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de0c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{0F63D180-8A8A-41CF-8B3E-2852647AB192}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0088.693] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{0F63D180-8A8A-41CF-8B3E-2852647AB192}'") returned 60
	[0088.693] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{0F63D180-8A8A-41CF-8B3E-2852647AB192}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0090.834] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0090.834] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0090.837] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de94, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{0B0F76A6-8FD3-471C-82BB-6BFF00FEE5E6}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0090.837] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{0B0F76A6-8FD3-471C-82BB-6BFF00FEE5E6}'") returned 60
	[0090.837] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{0B0F76A6-8FD3-471C-82BB-6BFF00FEE5E6}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0091.751] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0091.751] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0091.752] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de0c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{4F7A47EB-6D55-4A21-A8E3-D86C5E1F886F}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0091.752] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{4F7A47EB-6D55-4A21-A8E3-D86C5E1F886F}'") returned 60
	[0091.752] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{4F7A47EB-6D55-4A21-A8E3-D86C5E1F886F}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0092.615] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0092.615] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0092.617] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de94, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{1AADC94C-D98B-4E59-91DD-8E2EFE01CFB1}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0092.617] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{1AADC94C-D98B-4E59-91DD-8E2EFE01CFB1}'") returned 60
	[0092.617] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{1AADC94C-D98B-4E59-91DD-8E2EFE01CFB1}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0093.372] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0093.372] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0093.687] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de0c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{1EE90775-4E53-4C29-811E-F4996057D94E}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0093.687] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{1EE90775-4E53-4C29-811E-F4996057D94E}'") returned 60
	[0093.687] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{1EE90775-4E53-4C29-811E-F4996057D94E}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0094.716] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0094.716] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d0b8, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0094.718] IWbemClassObject:Get (in: This=0x2e5d0b8, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de94, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{DC780020-7243-4B55-80A9-4BA6EE67823B}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0094.718] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{DC780020-7243-4B55-80A9-4BA6EE67823B}'") returned 60
	[0094.718] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{DC780020-7243-4B55-80A9-4BA6EE67823B}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0095.821] IUnknown:Release (This=0x2e5d0b8) returned 0x0
	[0095.821] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d930, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0095.823] IWbemClassObject:Get (in: This=0x2e5d930, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de0c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{3DBBFF70-A67F-4333-8498-31E7BC089E0F}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0095.823] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{3DBBFF70-A67F-4333-8498-31E7BC089E0F}'") returned 60
	[0095.824] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{3DBBFF70-A67F-4333-8498-31E7BC089E0F}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0098.199] IUnknown:Release (This=0x2e5d930) returned 0x0
	[0098.199] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d930, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0098.201] IWbemClassObject:Get (in: This=0x2e5d930, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de94, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{1924CB9A-2919-4442-A6C0-E60362A636CF}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0098.201] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{1924CB9A-2919-4442-A6C0-E60362A636CF}'") returned 60
	[0098.201] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{1924CB9A-2919-4442-A6C0-E60362A636CF}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0099.290] IUnknown:Release (This=0x2e5d930) returned 0x0
	[0099.290] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d930, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0099.292] IWbemClassObject:Get (in: This=0x2e5d930, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de0c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{5555A914-627B-4AF5-A342-EC1A6421363A}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0099.292] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{5555A914-627B-4AF5-A342-EC1A6421363A}'") returned 60
	[0099.292] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{5555A914-627B-4AF5-A342-EC1A6421363A}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0100.211] IUnknown:Release (This=0x2e5d930) returned 0x0
	[0100.211] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d930, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0100.213] IWbemClassObject:Get (in: This=0x2e5d930, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de94, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{C7241040-5C13-409D-A239-55D005C03DE9}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0100.213] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{C7241040-5C13-409D-A239-55D005C03DE9}'") returned 60
	[0100.213] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{C7241040-5C13-409D-A239-55D005C03DE9}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0101.139] IUnknown:Release (This=0x2e5d930) returned 0x0
	[0101.139] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d930, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0101.141] IWbemClassObject:Get (in: This=0x2e5d930, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de0c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{E3DFFA61-E1CC-49E0-BCD2-5A0175DAACD9}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0101.141] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{E3DFFA61-E1CC-49E0-BCD2-5A0175DAACD9}'") returned 60
	[0101.141] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{E3DFFA61-E1CC-49E0-BCD2-5A0175DAACD9}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0101.987] IUnknown:Release (This=0x2e5d930) returned 0x0
	[0101.987] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d930, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0101.989] IWbemClassObject:Get (in: This=0x2e5d930, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de94, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{A15F4F35-0EBE-4C4B-97F3-D2181096B62F}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0101.989] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{A15F4F35-0EBE-4C4B-97F3-D2181096B62F}'") returned 60
	[0101.989] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{A15F4F35-0EBE-4C4B-97F3-D2181096B62F}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0103.103] IUnknown:Release (This=0x2e5d930) returned 0x0
	[0103.103] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d930, puReturned=0x2cf0a0*=0x1) returned 0x0
	[0103.105] IWbemClassObject:Get (in: This=0x2e5d930, wszName="id", lFlags=0, pVal=0x2cf078*(varType=0x0, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1=0x62de0c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x2cf078*(varType=0x8, wReserved1=0x0, wReserved2=0xb140, wReserved3=0xde, varVal1="{E369493E-E5B4-449B-8539-770BCA375ABB}", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0
	[0103.105] wsprintfW (in: param_1=0x2cef70, param_2="Win32_ShadowCopy.ID='%s'" | out: param_1="Win32_ShadowCopy.ID='{E369493E-E5B4-449B-8539-770BCA375ABB}'") returned 60
	[0103.105] IWbemServices:DeleteInstance (in: This=0x2e5cfdc, strObjectPath="Win32_ShadowCopy.ID='{E369493E-E5B4-449B-8539-770BCA375ABB}'", lFlags=0, pCtx=0x2e5c660, ppCallResult=0x0 | out: ppCallResult=0x0) returned 0x0
	[0103.319] IUnknown:Release (This=0x2e5d930) returned 0x0
	[0103.319] IEnumWbemClassObject:Next (in: This=0x2e5d07c, lTimeout=-1, uCount=0x1, apObjects=0x2cf0a4, puReturned=0x2cf0a0 | out: apObjects=0x2cf0a4*=0x2e5d930, puReturned=0x2cf0a0*=0x0) returned 0x1
	[0103.322] WbemLocator:IUnknown:Release (This=0x2e5cfdc) returned 0x0
	[0103.323] WbemLocator:IUnknown:Release (This=0x2e5c730) returned 0x0
	[0103.324] WbemContext:IUnknown:Release (This=0x2e5c660) returned 0x0
	[0103.428] SHEmptyRecycleBinA (hwnd=0x0, pszRootPath=0x0, dwFlags=0x1) returned 0x8000ffff
	[0106.771] GetLogicalDrives () returned 0x4
	[0106.771] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0106.771] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x18) returned 0x643660
	[0106.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xdeb210, lpParameter=0x643660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x294
	[0106.772] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x4) returned 0x613bc0
	[0106.772] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x13, lpNetResource=0x0, lphEnum=0x2cf09c | out: lphEnum=0x2cf09c*=0x61e990) returned 0x0
	[0108.778] GetProcessHeap () returned 0x5f0000
	[0108.778] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x4000) returned 0x35106b8
	[0108.778] WNetEnumResourceW (in: hEnum=0x61e990, lpcCount=0x2cf0a4, lpBuffer=0x35106b8, lpBufferSize=0x2cf0a0 | out: lpcCount=0x2cf0a4, lpBuffer=0x35106b8, lpBufferSize=0x2cf0a0) returned 0x0
	[0108.778] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x13, lpNetResource=0x35106b8, lphEnum=0x2cf06c | out: lphEnum=0x2cf06c*=0x643780) returned 0x0
	[0108.939] GetProcessHeap () returned 0x5f0000
	[0108.939] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x4000) returned 0x35146c0
	[0108.939] WNetEnumResourceW (in: hEnum=0x643780, lpcCount=0x2cf074, lpBuffer=0x35146c0, lpBufferSize=0x2cf070 | out: lpcCount=0x2cf074, lpBuffer=0x35146c0, lpBufferSize=0x2cf070) returned 0x103
	[0108.939] GetProcessHeap () returned 0x5f0000
	[0108.939] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35146c0 | out: hHeap=0x5f0000) returned 1
	[0108.939] WNetCloseEnum (hEnum=0x643780) returned 0x0
	[0108.939] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x13, lpNetResource=0x35106d8, lphEnum=0x2cf06c | out: lphEnum=0x2cf06c*=0x643780) returned 0x4b8
	[0122.637] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x13, lpNetResource=0x35106f8, lphEnum=0x2cf06c | out: lphEnum=0x2cf06c*=0x643780) returned 0x4c6
	[0122.646] WNetEnumResourceW (in: hEnum=0x61e990, lpcCount=0x2cf0a4, lpBuffer=0x35106b8, lpBufferSize=0x2cf0a0 | out: lpcCount=0x2cf0a4, lpBuffer=0x35106b8, lpBufferSize=0x2cf0a0) returned 0x103
	[0122.646] GetProcessHeap () returned 0x5f0000
	[0122.646] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35106b8 | out: hHeap=0x5f0000) returned 1
	[0122.647] WNetCloseEnum (hEnum=0x61e990) returned 0x0
	[0122.647] GetCurrentThreadId () returned 0x6fc
	[0122.648] GetLastError () returned 0x103
	[0122.648] SetLastError (dwErrCode=0x103) 
	[0122.648] GetLastError () returned 0x103
	[0122.648] SetLastError (dwErrCode=0x103) 
	[0122.648] WriteFile (in: hFile=0x7, lpBuffer=0x2cd680*, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0x2cd678, lpOverlapped=0x0 | out: lpBuffer=0x2cd680*, lpNumberOfBytesWritten=0x2cd678*=0x3d, lpOverlapped=0x0) returned 1
	[0122.668] WaitForMultipleObjects (nCount=0x1, lpHandles=0x613bc0*=0x294, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0x0
	[0129.541] GetCurrentThreadId () returned 0x6fc
	[0129.541] GetLastError () returned 0x103
	[0129.541] SetLastError (dwErrCode=0x103) 
	[0129.541] GetLastError () returned 0x103
	[0129.541] SetLastError (dwErrCode=0x103) 
	[0129.541] WriteFile (in: hFile=0x7, lpBuffer=0x2cd680*, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0x2cd678, lpOverlapped=0x0 | out: lpBuffer=0x2cd680*, lpNumberOfBytesWritten=0x2cd678*=0x3a, lpOverlapped=0x0) returned 1
	[0129.541] CloseHandle (hObject=0x294) returned 1
	[0129.542] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x613bc0 | out: hHeap=0x5f0000) returned 1
	[0129.542] GetCurrentThreadId () returned 0x6fc
	[0129.542] GetLastError () returned 0x103
	[0129.542] SetLastError (dwErrCode=0x103) 
	[0129.542] GetLastError () returned 0x103
	[0129.542] SetLastError (dwErrCode=0x103) 
	[0129.542] WriteFile (in: hFile=0x7, lpBuffer=0x2cd680*, nNumberOfBytesToWrite=0x44, lpNumberOfBytesWritten=0x2cd678, lpOverlapped=0x0 | out: lpBuffer=0x2cd680*, lpNumberOfBytesWritten=0x2cd678*=0x44, lpOverlapped=0x0) returned 1
	[0129.542] Sleep (dwMilliseconds=0x3e8) 
	[0130.548] Sleep (dwMilliseconds=0x3e8) 
	[0131.562] Sleep (dwMilliseconds=0x3e8) 
	[0132.576] Sleep (dwMilliseconds=0x3e8) 
	[0133.590] Sleep (dwMilliseconds=0x3e8) 
	[0134.825] Sleep (dwMilliseconds=0x3e8) 

Thread:
	id = 2
	os_tid = 0x434

	[0057.798] GetCurrentThreadId () returned 0x434
	[0057.798] GetCurrentThreadId () returned 0x434
	[0057.798] GetLastError () returned 0x57
	[0057.798] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x364) returned 0x610528
	[0057.799] SetLastError (dwErrCode=0x57) 
	[0057.799] GetLastError () returned 0x57
	[0057.800] SetLastError (dwErrCode=0x57) 
	[0057.800] WriteFile (in: hFile=0x7, lpBuffer=0x249d928*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x249d920, lpOverlapped=0x0 | out: lpBuffer=0x249d928*, lpNumberOfBytesWritten=0x249d920*=0x49, lpOverlapped=0x0) returned 1
	[0057.802] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0074.932] GetLastError () returned 0x102
	[0074.932] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0080.305] GetLastError () returned 0x102
	[0080.305] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0085.656] GetLastError () returned 0x102
	[0085.656] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0090.794] GetLastError () returned 0x102
	[0090.794] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0095.812] GetLastError () returned 0x102
	[0095.812] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0101.121] GetLastError () returned 0x102
	[0101.121] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0109.970] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0109.982] GetLastError () returned 0x3e5
	[0109.982] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.000] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0110.000] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0110.007] GetLastError () returned 0x3e5
	[0110.007] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.024] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474560
	[0110.032] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.034] GetLastError () returned 0x3e5
	[0110.034] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.081] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1966080
	[0110.087] WriteFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0x0
	[0110.090] GetLastError () returned 0x3e5
	[0110.090] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.100] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1966080
	[0110.100] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.103] GetLastError () returned 0x3e5
	[0110.103] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.112] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2457600
	[0110.112] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.133] GetLastError () returned 0x3e5
	[0110.133] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.152] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2949120
	[0110.152] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.164] GetLastError () returned 0x3e5
	[0110.164] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.175] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0110.175] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.202] GetLastError () returned 0x3e5
	[0110.202] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.212] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0110.212] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.213] GetLastError () returned 0x3e5
	[0110.213] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.222] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0110.222] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.249] GetLastError () returned 0x3e5
	[0110.250] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.261] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474560
	[0110.261] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0110.263] GetLastError () returned 0x3e5
	[0110.263] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.317] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.317] GetLastError () returned 0x3e5
	[0110.317] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.318] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=1184 | out: Addend=0xe0dabc) returned 1966080
	[0110.318] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0110.318] GetLastError () returned 0x3e5
	[0110.318] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.318] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0110.319] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0110.319] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0110.319] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=1184) returned 1
	[0110.319] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.319] GetLastError () returned 0x3e5
	[0110.319] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0110.319] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.353] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=68382 | out: Addend=0xe0dacc) returned 1967258
	[0110.354] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x10b20, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.354] GetLastError () returned 0x3e5
	[0110.354] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0110.355] GetLastError () returned 0x26
	[0110.355] GetLastError () returned 0x26
	[0110.355] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.355] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.356] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633088
	[0110.356] CancelIo (hFile=0x3c0) returned 1
	[0110.356] CloseHandle (hObject=0x3c0) returned 1
	[0110.360] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0110.360] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0110.360] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0110.361] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0110.361] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.crypted")) returned 1
	[0110.362] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0110.362] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633088 | out: hHeap=0x5f0000) returned 1
	[0110.362] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.745] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0110.750] GetLastError () returned 0x3e5
	[0110.750] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.750] ReadFile (in: hFile=0x3c4, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0110.750] GetLastError () returned 0x3e5
	[0110.750] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.751] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=1184 | out: Addend=0xe0dabc) returned 7665920
	[0110.751] ReadFile (in: hFile=0x3c4, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0110.751] GetLastError () returned 0x3e5
	[0110.751] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.751] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cad8
	[0110.751] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d4f8
	[0110.751] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d4f8 | out: hHeap=0x5f0000) returned 1
	[0110.751] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=1184) returned 1
	[0110.751] WriteFile (in: hFile=0x3c4, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0110.751] GetLastError () returned 0x3e5
	[0110.752] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0110.752] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.783] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=1172 | out: Addend=0xe0dacc) returned 7175546
	[0110.783] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.783] GetLastError () returned 0x3e5
	[0110.783] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0110.783] GetLastError () returned 0x26
	[0110.783] GetLastError () returned 0x26
	[0110.783] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.783] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.784] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0110.784] CancelIo (hFile=0x3c4) returned 1
	[0110.784] CloseHandle (hObject=0x3c4) returned 1
	[0110.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0110.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0110.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0110.786] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0110.786] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.crypted")) returned 1
	[0110.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0110.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0110.786] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.805] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.805] GetLastError () returned 0x3e5
	[0110.805] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.807] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=88464 | out: Addend=0xe0dabc) returned 7668288
	[0110.807] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0110.807] GetLastError () returned 0x3e5
	[0110.807] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.807] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0110.807] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0110.808] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0110.808] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=88464) returned 1
	[0110.808] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.808] GetLastError () returned 0x3e5
	[0110.808] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0110.808] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.831] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=50589 | out: Addend=0xe0dacc) returned 7265169
	[0110.832] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0xc5a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.832] GetLastError () returned 0x3e5
	[0110.832] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0110.833] GetLastError () returned 0x26
	[0110.833] GetLastError () returned 0x26
	[0110.833] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.833] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.833] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0110.833] CancelIo (hFile=0x3c4) returned 1
	[0110.833] CloseHandle (hObject=0x3c4) returned 1
	[0110.836] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0110.836] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0110.836] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0110.837] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0110.837] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5Rjw5.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5rjw5.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5Rjw5.jpg.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5rjw5.jpg.crypted")) returned 1
	[0110.838] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0110.838] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0110.838] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.853] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.853] GetLastError () returned 0x3e5
	[0110.853] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.856] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=98592 | out: Addend=0xe0dabc) returned 7807344
	[0110.856] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0110.856] GetLastError () returned 0x3e5
	[0110.856] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.856] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0110.856] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0110.856] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0110.856] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=98592) returned 1
	[0110.856] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.857] GetLastError () returned 0x3e5
	[0110.857] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0110.857] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.876] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=22286 | out: Addend=0xe0dacc) returned 7414340
	[0110.876] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x5710, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.876] GetLastError () returned 0x3e5
	[0110.876] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0110.877] GetLastError () returned 0x26
	[0110.877] GetLastError () returned 0x26
	[0110.877] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.877] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.878] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0110.878] CancelIo (hFile=0x3c4) returned 1
	[0110.878] CloseHandle (hObject=0x3c4) returned 1
	[0110.883] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0110.883] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0110.883] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0110.884] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0110.884] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C4_k3VUR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c4_k3vur.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C4_k3VUR.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c4_k3vur.gif.crypted")) returned 1
	[0110.884] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0110.884] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0110.884] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.898] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.898] GetLastError () returned 0x3e5
	[0110.898] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.900] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=62176 | out: Addend=0xe0dabc) returned 7928224
	[0110.900] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0110.900] GetLastError () returned 0x3e5
	[0110.900] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.900] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0110.900] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0110.901] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0110.901] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=62176) returned 1
	[0110.901] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.901] GetLastError () returned 0x3e5
	[0110.901] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0110.901] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.928] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=43518 | out: Addend=0xe0dacc) returned 7498788
	[0110.929] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0xaa00, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.929] GetLastError () returned 0x3e5
	[0110.929] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0110.929] GetLastError () returned 0x26
	[0110.929] GetLastError () returned 0x26
	[0110.929] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.929] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.930] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0110.930] CancelIo (hFile=0x3c4) returned 1
	[0110.930] CloseHandle (hObject=0x3c4) returned 1
	[0110.975] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0110.975] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0110.975] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0110.976] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0110.976] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EN12F2.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\en12f2.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EN12F2.swf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\en12f2.swf.crypted")) returned 1
	[0110.977] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0110.977] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0110.977] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.993] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.993] GetLastError () returned 0x3e5
	[0110.993] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.994] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=44064 | out: Addend=0xe0dabc) returned 8033920
	[0110.994] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0110.994] GetLastError () returned 0x3e5
	[0110.994] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0110.995] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0110.995] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0110.995] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0110.996] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=44064) returned 1
	[0110.996] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.996] GetLastError () returned 0x3e5
	[0110.996] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0110.996] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.024] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=44226 | out: Addend=0xe0dacc) returned 7586359
	[0111.024] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0xacd0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.025] GetLastError () returned 0x3e5
	[0111.025] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0111.025] GetLastError () returned 0x26
	[0111.025] GetLastError () returned 0x26
	[0111.025] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.025] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.027] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0111.027] CancelIo (hFile=0x3c0) returned 1
	[0111.027] CloseHandle (hObject=0x3c0) returned 1
	[0111.028] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dae0 | out: hHeap=0x5f0000) returned 1
	[0111.028] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0111.028] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0111.029] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0111.029] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\4caPG5v.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\4capg5v.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\4caPG5v.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\4capg5v.bmp.crypted")) returned 1
	[0111.030] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0111.030] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0111.030] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.045] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.046] GetLastError () returned 0x3e5
	[0111.046] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.049] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=97104 | out: Addend=0xe0dabc) returned 8122224
	[0111.049] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0111.049] GetLastError () returned 0x3e5
	[0111.049] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.049] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351dff0
	[0111.049] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351e400
	[0111.049] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351e400 | out: hHeap=0x5f0000) returned 1
	[0111.049] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=97104) returned 1
	[0111.049] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.050] GetLastError () returned 0x3e5
	[0111.050] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0111.050] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.069] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=75895 | out: Addend=0xe0dacc) returned 7727676
	[0111.070] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x12880, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.070] GetLastError () returned 0x3e5
	[0111.070] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0111.071] GetLastError () returned 0x26
	[0111.071] GetLastError () returned 0x26
	[0111.071] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.071] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.072] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0111.072] CancelIo (hFile=0x3c0) returned 1
	[0111.072] CloseHandle (hObject=0x3c0) returned 1
	[0111.081] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dae0 | out: hHeap=0x5f0000) returned 1
	[0111.081] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0111.081] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0111.081] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3510048
	[0111.081] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\t-HIGqHc1g5oQmZj.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\t-higqhc1g5oqmzj.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\t-HIGqHc1g5oQmZj.mkv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\t-higqhc1g5oqmzj.mkv.crypted")) returned 1
	[0111.082] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510048 | out: hHeap=0x5f0000) returned 1
	[0111.082] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0111.082] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.097] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.098] GetLastError () returned 0x3e5
	[0111.098] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.099] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=53056 | out: Addend=0xe0dabc) returned 8295232
	[0111.099] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0111.099] GetLastError () returned 0x3e5
	[0111.099] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.100] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351dff0
	[0111.100] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351e400
	[0111.100] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351e400 | out: hHeap=0x5f0000) returned 1
	[0111.100] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=53056) returned 1
	[0111.100] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.100] GetLastError () returned 0x3e5
	[0111.101] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0111.101] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.125] ReadFile (in: hFile=0x3c8, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0111.125] GetLastError () returned 0x3e5
	[0111.125] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.127] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=93056 | out: Addend=0xe0dabc) returned 8348288
	[0111.127] ReadFile (in: hFile=0x3c8, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0111.127] GetLastError () returned 0x3e5
	[0111.128] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.128] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351e500
	[0111.128] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351e910
	[0111.128] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351e910 | out: hHeap=0x5f0000) returned 1
	[0111.128] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=93056) returned 1
	[0111.128] WriteFile (in: hFile=0x3c8, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0111.128] GetLastError () returned 0x3e5
	[0111.128] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351e500 | out: hHeap=0x5f0000) returned 1
	[0111.129] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.181] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8932864
	[0111.181] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.182] GetLastError () returned 0x3e5
	[0111.182] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.190] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9424384
	[0111.190] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.211] GetLastError () returned 0x3e5
	[0111.211] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.222] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0111.222] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.223] GetLastError () returned 0x3e5
	[0111.223] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.231] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0111.231] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0111.564] GetLastError () returned 0x3e5
	[0111.564] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.581] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0111.581] GetLastError () returned 0x3e5
	[0111.581] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.583] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=88112 | out: Addend=0xe0dabc) returned 5199200
	[0111.583] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0111.583] GetLastError () returned 0x3e5
	[0111.583] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.583] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cad8
	[0111.583] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351cee8
	[0111.583] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cee8 | out: hHeap=0x5f0000) returned 1
	[0111.583] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=88112) returned 1
	[0111.583] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.583] GetLastError () returned 0x3e5
	[0111.583] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0111.584] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.601] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=87266 | out: Addend=0xe0dacc) returned 4795730
	[0111.602] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x154f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0x0
	[0111.603] GetLastError () returned 0x3e5
	[0111.603] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.617] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.617] GetLastError () returned 0x3e5
	[0111.617] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.618] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=35120 | out: Addend=0xe0dabc) returned 5287312
	[0111.618] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0111.618] GetLastError () returned 0x3e5
	[0111.618] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.618] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0111.618] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0111.618] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0111.618] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=35120) returned 1
	[0111.618] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.618] GetLastError () returned 0x3e5
	[0111.618] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0111.618] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.676] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=10608 | out: Addend=0xe0dabc) returned 5322432
	[0111.676] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0111.676] GetLastError () returned 0x3e5
	[0111.676] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.676] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0111.676] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0111.676] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0111.676] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=10608) returned 1
	[0111.676] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.676] GetLastError () returned 0x3e5
	[0111.676] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0111.677] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.696] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=14368 | out: Addend=0xe0dabc) returned 5333040
	[0111.696] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0111.696] GetLastError () returned 0x3e5
	[0111.696] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.696] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0111.696] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0111.697] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0111.697] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=14368) returned 1
	[0111.697] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.697] GetLastError () returned 0x3e5
	[0111.697] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0111.697] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.743] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=22094 | out: Addend=0xe0dacc) returned 4943058
	[0111.743] WriteFile (in: hFile=0x3c8, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0111.744] GetLastError () returned 0x3e5
	[0111.744] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0111.744] GetLastError () returned 0x26
	[0111.744] GetLastError () returned 0x26
	[0111.744] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4ab0020) returned 1
	[0111.744] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.745] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0111.745] CancelIo (hFile=0x3c8) returned 1
	[0111.745] CloseHandle (hObject=0x3c8) returned 1
	[0111.752] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0111.752] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0111.753] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4ab0020 | out: hHeap=0x5f0000) returned 1
	[0111.753] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0111.753] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\3icwdXHwxyHA4vRA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\3icwdxhwxyha4vra.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\3icwdXHwxyHA4vRA.png.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\3icwdxhwxyha4vra.png.crypted")) returned 1
	[0111.754] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0111.754] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0111.754] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.767] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5456672
	[0111.772] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.774] GetLastError () returned 0x3e5
	[0111.774] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.775] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5948192
	[0111.781] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.783] GetLastError () returned 0x3e5
	[0111.783] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.812] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6439712
	[0111.818] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.819] GetLastError () returned 0x3e5
	[0111.819] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.820] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6931232
	[0111.826] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.827] GetLastError () returned 0x3e5
	[0111.827] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.847] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7422752
	[0111.853] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.856] GetLastError () returned 0x3e5
	[0111.856] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.856] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7914272
	[0111.862] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.864] GetLastError () returned 0x3e5
	[0111.864] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.885] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8405792
	[0111.890] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.893] GetLastError () returned 0x3e5
	[0111.893] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.894] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8897312
	[0111.900] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.902] GetLastError () returned 0x3e5
	[0111.902] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.917] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9388832
	[0111.930] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.933] GetLastError () returned 0x3e5
	[0111.933] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0111.934] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9880352
	[0111.940] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.941] GetLastError () returned 0x3e5
	[0111.941] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.190] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10771502
	[0112.196] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0112.230] GetLastError () returned 0x3e5
	[0112.230] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.312] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0112.312] GetLastError () returned 0x3e5
	[0112.312] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.324] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=39696 | out: Addend=0xe0dabc) returned 0
	[0112.324] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0112.324] GetLastError () returned 0x3e5
	[0112.324] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351edc0
	[0112.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351f1d0
	[0112.325] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351f1d0 | out: hHeap=0x5f0000) returned 1
	[0112.325] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=39696) returned 1
	[0112.325] WriteFile (in: hFile=0x3a8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.325] GetLastError () returned 0x3e5
	[0112.325] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0112.325] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.341] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=14144 | out: Addend=0xe0dabc) returned 39696
	[0112.341] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0112.341] GetLastError () returned 0x3e5
	[0112.341] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.342] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0112.342] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0112.342] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0112.342] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=14144) returned 1
	[0112.342] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0112.342] GetLastError () returned 0x3e5
	[0112.342] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0112.342] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.571] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 545360
	[0112.571] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.596] GetLastError () returned 0x3e5
	[0112.596] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.608] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1036880
	[0112.608] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.608] GetLastError () returned 0x3e5
	[0112.608] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.618] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1528400
	[0112.618] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.644] GetLastError () returned 0x3e5
	[0112.644] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.656] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2019920
	[0112.656] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.657] GetLastError () returned 0x3e5
	[0112.657] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.667] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2511440
	[0112.667] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.667] GetLastError () returned 0x3e5
	[0112.667] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.677] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3002960
	[0112.677] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.704] GetLastError () returned 0x3e5
	[0112.704] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.715] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3494480
	[0112.715] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.715] GetLastError () returned 0x3e5
	[0112.716] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.725] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3986000
	[0112.725] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.749] GetLastError () returned 0x3e5
	[0112.749] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.760] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4477520
	[0112.760] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.760] GetLastError () returned 0x3e5
	[0112.760] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.770] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4969040
	[0112.770] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.793] GetLastError () returned 0x3e5
	[0112.793] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.804] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5460560
	[0112.804] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.804] GetLastError () returned 0x3e5
	[0112.804] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.814] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5952080
	[0112.814] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.852] GetLastError () returned 0x3e5
	[0112.852] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.862] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6443600
	[0112.862] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.863] GetLastError () returned 0x3e5
	[0112.863] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.873] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6935120
	[0112.873] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.897] GetLastError () returned 0x3e5
	[0112.897] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.909] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7426640
	[0112.909] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.909] GetLastError () returned 0x3e5
	[0112.909] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0112.918] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7918160
	[0112.918] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.944] GetLastError () returned 0x3e5
	[0112.944] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.197] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8901181
	[0113.204] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.216] GetLastError () returned 0x3e5
	[0113.216] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.217] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9392701
	[0113.224] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.225] GetLastError () returned 0x3e5
	[0113.225] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.227] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9884221
	[0113.237] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.238] GetLastError () returned 0x3e5
	[0113.238] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.263] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10375741
	[0113.268] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.270] GetLastError () returned 0x3e5
	[0113.270] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.271] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10867261
	[0113.277] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.278] GetLastError () returned 0x3e5
	[0113.278] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.290] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 11358781
	[0113.296] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.298] GetLastError () returned 0x3e5
	[0113.298] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.300] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 11850301
	[0113.306] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.307] GetLastError () returned 0x3e5
	[0113.307] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.644] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 84177
	[0113.652] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0113.725] GetLastError () returned 0x3e5
	[0113.726] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.730] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.731] GetLastError () returned 0x3e5
	[0113.731] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.731] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=20912 | out: Addend=0xe0dabc) returned 2050272
	[0113.731] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0113.732] GetLastError () returned 0x3e5
	[0113.732] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.732] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0113.732] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3524cc0
	[0113.732] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3524cc0 | out: hHeap=0x5f0000) returned 1
	[0113.732] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=20912) returned 1
	[0113.732] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.732] GetLastError () returned 0x3e5
	[0113.732] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0113.733] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.761] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=49024 | out: Addend=0xe0dabc) returned 2071184
	[0113.761] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0113.761] GetLastError () returned 0x3e5
	[0113.761] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.761] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0113.761] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3524cc0
	[0113.762] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3524cc0 | out: hHeap=0x5f0000) returned 1
	[0113.762] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=49024) returned 1
	[0113.762] WriteFile (in: hFile=0x3c8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0113.762] GetLastError () returned 0x3e5
	[0113.762] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0113.762] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.806] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=60232 | out: Addend=0xe0dacc) returned 2120189
	[0113.807] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0xeb50, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.808] GetLastError () returned 0x3e5
	[0113.808] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0113.808] GetLastError () returned 0x26
	[0113.808] GetLastError () returned 0x26
	[0113.808] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.808] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.809] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0113.809] CancelIo (hFile=0x3c8) returned 1
	[0113.809] CloseHandle (hObject=0x3c8) returned 1
	[0113.812] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3521c18 | out: hHeap=0x5f0000) returned 1
	[0113.812] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0113.813] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0113.813] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0113.813] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XAMO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xamo.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XAMO.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xamo.mp3.crypted")) returned 1
	[0113.814] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0113.814] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0113.814] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.846] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.846] GetLastError () returned 0x3e5
	[0113.846] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.847] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=30928 | out: Addend=0xe0dabc) returned 2180448
	[0113.847] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0113.847] GetLastError () returned 0x3e5
	[0113.848] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.848] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0113.848] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0113.848] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0113.848] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=30928) returned 1
	[0113.848] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.848] GetLastError () returned 0x3e5
	[0113.848] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0113.849] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.878] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=45724 | out: Addend=0xe0dacc) returned 2211334
	[0113.879] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0xb2a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.879] GetLastError () returned 0x3e5
	[0113.879] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0113.880] GetLastError () returned 0x26
	[0113.880] GetLastError () returned 0x26
	[0113.880] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.880] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.881] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0113.881] CancelIo (hFile=0x3c8) returned 1
	[0113.881] CloseHandle (hObject=0x3c8) returned 1
	[0113.889] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3521c18 | out: hHeap=0x5f0000) returned 1
	[0113.889] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x632f78 | out: hHeap=0x5f0000) returned 1
	[0113.889] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0113.889] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0113.890] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YOibxDGO83L0-bQimYPS.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yoibxdgo83l0-bqimyps.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YOibxDGO83L0-bQimYPS.png.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yoibxdgo83l0-bqimyps.png.crypted")) returned 1
	[0113.891] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0113.891] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0113.891] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.891] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=18360 | out: Addend=0xe0dacc) returned 2257058
	[0113.892] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x47c0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0113.892] GetLastError () returned 0x3e5
	[0113.892] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0113.892] GetLastError () returned 0x26
	[0113.892] GetLastError () returned 0x26
	[0113.892] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0113.892] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.893] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0113.893] CancelIo (hFile=0x3c4) returned 1
	[0113.893] CloseHandle (hObject=0x3c4) returned 1
	[0113.896] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522790 | out: hHeap=0x5f0000) returned 1
	[0113.896] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0113.896] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0113.898] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0113.898] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wf3_D.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wf3_d.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wf3_D.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wf3_d.gif.crypted")) returned 1
	[0113.899] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0113.899] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0113.899] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.939] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.940] GetLastError () returned 0x3e5
	[0113.940] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.942] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=91424 | out: Addend=0xe0dabc) returned 2275472
	[0113.942] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0113.942] GetLastError () returned 0x3e5
	[0113.942] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0113.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0113.943] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0113.943] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=91424) returned 1
	[0113.943] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.943] GetLastError () returned 0x3e5
	[0113.943] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0113.943] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.974] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=72758 | out: Addend=0xe0dacc) returned 2366827
	[0113.975] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x11c40, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.976] GetLastError () returned 0x3e5
	[0113.976] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0113.976] GetLastError () returned 0x26
	[0113.976] GetLastError () returned 0x26
	[0113.976] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.976] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0113.978] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0113.978] CancelIo (hFile=0x3c8) returned 1
	[0113.978] CloseHandle (hObject=0x3c8) returned 1
	[0113.980] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3521c18 | out: hHeap=0x5f0000) returned 1
	[0113.980] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0113.981] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0113.981] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0113.981] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\bKAq_r l5wQ8PPjFGY8.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bkaq_r l5wq8ppjfgy8.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\bKAq_r l5wQ8PPjFGY8.pptx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bkaq_r l5wq8ppjfgy8.pptx.crypted")) returned 1
	[0113.982] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0113.982] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0113.982] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.001] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0114.001] GetLastError () returned 0x3e5
	[0114.001] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.036] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=64288 | out: Addend=0xe0dabc) returned 2439664
	[0114.036] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0114.036] GetLastError () returned 0x3e5
	[0114.036] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.036] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0114.036] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0114.037] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0114.037] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=64288) returned 1
	[0114.037] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0114.038] GetLastError () returned 0x3e5
	[0114.038] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0114.038] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.063] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=26984 | out: Addend=0xe0dacc) returned 2503869
	[0114.063] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x6970, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0114.064] GetLastError () returned 0x3e5
	[0114.064] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0114.064] GetLastError () returned 0x26
	[0114.064] GetLastError () returned 0x26
	[0114.064] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0114.064] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.065] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0114.065] CancelIo (hFile=0x3c8) returned 1
	[0114.065] CloseHandle (hObject=0x3c8) returned 1
	[0114.069] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3521c18 | out: hHeap=0x5f0000) returned 1
	[0114.069] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.070] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0114.070] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0114.070] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ex0yzzZdMvZMWb5oP.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ex0yzzzdmvzmwb5op.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ex0yzzZdMvZMWb5oP.docx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ex0yzzzdmvzmwb5op.docx.crypted")) returned 1
	[0114.071] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0114.071] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0114.071] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.084] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=63886 | out: Addend=0xe0dacc) returned 2530853
	[0114.086] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xf990, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.086] GetLastError () returned 0x3e5
	[0114.086] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0114.086] GetLastError () returned 0x26
	[0114.086] GetLastError () returned 0x26
	[0114.086] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0114.087] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.087] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0114.087] CancelIo (hFile=0x3c4) returned 1
	[0114.087] CloseHandle (hObject=0x3c4) returned 1
	[0114.092] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522790 | out: hHeap=0x5f0000) returned 1
	[0114.092] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0114.093] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0114.093] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.093] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_sq_ e5DTD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_sq_ e5dtd.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_sq_ e5DTD.swf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_sq_ e5dtd.swf.crypted")) returned 1
	[0114.094] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.094] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0114.094] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.151] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2594832
	[0114.151] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.151] GetLastError () returned 0x3e5
	[0114.151] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.161] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3086352
	[0114.161] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.179] GetLastError () returned 0x3e5
	[0114.179] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.187] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3577872
	[0114.188] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.188] GetLastError () returned 0x3e5
	[0114.188] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.197] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4069392
	[0114.197] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.212] GetLastError () returned 0x3e5
	[0114.212] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.408] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4915408
	[0114.408] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0114.460] GetLastError () returned 0x3e5
	[0114.460] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.910] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0114.917] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.919] GetLastError () returned 0x3e5
	[0114.919] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0114.950] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0114.957] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.959] GetLastError () returned 0x3e5
	[0114.959] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0115.592] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0115.592] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0115.601] GetLastError () returned 0x3e5
	[0115.601] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0115.608] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0115.608] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.313] GetLastError () returned 0x3e5
	[0116.313] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0116.323] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2465232
	[0116.323] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.715] GetLastError () returned 0x3e5
	[0116.715] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0116.724] GetLastError () returned 0x26
	[0116.724] GetLastError () returned 0x26
	[0116.724] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.724] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0116.725] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0116.725] CancelIo (hFile=0x3c4) returned 1
	[0116.725] CloseHandle (hObject=0x3c4) returned 1
	[0116.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0116.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.729] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0116.729] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZM7E2pUAGp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zm7e2puagp.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZM7E2pUAGp.xlsx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zm7e2puagp.xlsx.crypted")) returned 1
	[0116.729] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0116.729] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0116.729] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0116.743] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=37722 | out: Addend=0xe0dacc) returned 839131
	[0116.743] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x9360, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.743] GetLastError () returned 0x3e5
	[0116.743] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0116.744] GetLastError () returned 0x26
	[0116.744] GetLastError () returned 0x26
	[0116.744] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.744] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0116.744] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0116.744] CancelIo (hFile=0x3c4) returned 1
	[0116.745] CloseHandle (hObject=0x3c4) returned 1
	[0116.746] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.746] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0116.746] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.746] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0116.746] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZUHt.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zuht.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZUHt.docx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zuht.docx.crypted")) returned 1
	[0116.747] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0116.747] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0116.747] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0116.761] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=21350 | out: Addend=0xe0dacc) returned 876853
	[0116.761] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x5370, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.761] GetLastError () returned 0x3e5
	[0116.761] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0116.761] GetLastError () returned 0x26
	[0116.761] GetLastError () returned 0x26
	[0116.761] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.761] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0116.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0116.762] CancelIo (hFile=0x3c4) returned 1
	[0116.762] CloseHandle (hObject=0x3c4) returned 1
	[0116.763] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.763] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0116.763] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0116.764] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_Y 4p2LV0.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_y 4p2lv0.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_Y 4p2LV0.pptx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_y 4p2lv0.pptx.crypted")) returned 1
	[0116.765] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0116.765] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0116.765] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0116.835] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1389723
	[0116.841] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.843] GetLastError () returned 0x3e5
	[0116.843] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0116.853] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=240 | out: Addend=0xe0dabc) returned 1881312
	[0116.853] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.853] GetLastError () returned 0x3e5
	[0116.853] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0116.853] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0116.854] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0116.854] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0116.854] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=240) returned 1
	[0116.854] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.854] GetLastError () returned 0x3e5
	[0116.854] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0116.854] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0117.020] GetLastError () returned 0x26
	[0117.020] GetLastError () returned 0x26
	[0117.020] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.020] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.021] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0117.021] CancelIo (hFile=0x3d8) returned 1
	[0117.021] CloseHandle (hObject=0x3d8) returned 1
	[0117.044] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.044] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0117.044] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.045] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0117.045] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url.crypted")) returned 1
	[0117.046] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0117.046] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0117.046] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.089] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 4339305
	[0117.089] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0117.090] GetLastError () returned 0x3e5
	[0117.090] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0117.090] GetLastError () returned 0x26
	[0117.090] GetLastError () returned 0x26
	[0117.090] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0117.090] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.091] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0117.091] CancelIo (hFile=0x3e0) returned 1
	[0117.091] CloseHandle (hObject=0x3e0) returned 1
	[0117.092] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.092] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0117.092] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0117.093] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0117.093] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url.crypted")) returned 1
	[0117.094] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0117.094] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0117.094] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.111] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 4339438
	[0117.111] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0117.112] GetLastError () returned 0x3e5
	[0117.112] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0117.112] GetLastError () returned 0x26
	[0117.112] GetLastError () returned 0x26
	[0117.112] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0117.112] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.113] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0117.113] CancelIo (hFile=0x3e0) returned 1
	[0117.113] CloseHandle (hObject=0x3e0) returned 1
	[0117.115] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.115] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0117.115] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0117.116] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0117.116] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url.crypted")) returned 1
	[0117.117] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0117.117] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0117.117] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.131] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 4339680
	[0117.131] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.131] GetLastError () returned 0x3e5
	[0117.131] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.131] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0117.131] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.132] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.132] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=144) returned 1
	[0117.132] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.132] GetLastError () returned 0x3e5
	[0117.132] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0117.132] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0117.137] GetLastError () returned 0x26
	[0117.137] GetLastError () returned 0x26
	[0117.137] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0117.137] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.138] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0117.138] CancelIo (hFile=0x3e0) returned 1
	[0117.138] CloseHandle (hObject=0x3e0) returned 1
	[0117.141] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.141] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0117.141] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0117.141] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0117.141] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url.crypted")) returned 1
	[0117.143] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0117.143] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0117.143] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.155] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=134 | out: Addend=0xe0dacc) returned 4339837
	[0117.155] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.155] GetLastError () returned 0x3e5
	[0117.155] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0117.160] GetLastError () returned 0x26
	[0117.160] GetLastError () returned 0x26
	[0117.160] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.160] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.161] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0117.161] CancelIo (hFile=0x3e0) returned 1
	[0117.161] CloseHandle (hObject=0x3e0) returned 1
	[0117.162] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.162] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0117.162] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.162] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0117.162] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url.crypted")) returned 1
	[0117.163] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0117.163] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0117.163] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0117.180] GetLastError () returned 0x26
	[0117.180] GetLastError () returned 0x26
	[0117.180] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.180] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.181] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0117.181] CancelIo (hFile=0x3e0) returned 1
	[0117.181] CloseHandle (hObject=0x3e0) returned 1
	[0117.183] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.183] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0117.183] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.184] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0117.184] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url.crypted")) returned 1
	[0117.184] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0117.184] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0117.184] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.200] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 4340104
	[0117.200] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.200] GetLastError () returned 0x3e5
	[0117.200] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0117.203] GetLastError () returned 0x26
	[0117.203] GetLastError () returned 0x26
	[0117.203] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.203] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.204] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0117.204] CancelIo (hFile=0x3e0) returned 1
	[0117.204] CloseHandle (hObject=0x3e0) returned 1
	[0117.205] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.205] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0117.205] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.206] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0117.206] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url.crypted")) returned 1
	[0117.207] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0117.207] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0117.207] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.224] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 4340400
	[0117.224] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.224] GetLastError () returned 0x3e5
	[0117.224] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.225] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.225] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.225] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.225] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=144) returned 1
	[0117.225] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.226] GetLastError () returned 0x3e5
	[0117.226] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.226] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.251] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 4340544
	[0117.251] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.251] GetLastError () returned 0x3e5
	[0117.251] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.252] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.252] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.252] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.252] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=144) returned 1
	[0117.252] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.253] GetLastError () returned 0x3e5
	[0117.253] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.253] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.285] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4832023
	[0117.290] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.291] GetLastError () returned 0x3e5
	[0117.291] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.292] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5323543
	[0117.296] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.297] GetLastError () returned 0x3e5
	[0117.297] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.320] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5815063
	[0117.325] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.327] GetLastError () returned 0x3e5
	[0117.327] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.337] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6306716
	[0117.341] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.655] GetLastError () returned 0x3e5
	[0117.655] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.665] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1808
	[0117.665] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.665] GetLastError () returned 0x3e5
	[0117.666] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.675] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 493328
	[0117.675] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.697] GetLastError () returned 0x3e5
	[0117.697] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0117.709] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 984848
	[0117.709] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0117.709] GetLastError () returned 0x3e5
	[0117.709] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0118.111] GetLastError () returned 0x26
	[0118.111] GetLastError () returned 0x26
	[0118.111] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0118.111] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.112] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0118.112] CancelIo (hFile=0x3e0) returned 1
	[0118.112] CloseHandle (hObject=0x3e0) returned 1
	[0118.117] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0118.117] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0118.117] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0118.117] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0118.117] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\faFVh.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fafvh.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\faFVh.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fafvh.mp3.crypted")) returned 1
	[0118.119] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0118.119] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0118.119] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.137] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=26297 | out: Addend=0xe0dacc) returned 6303556
	[0118.138] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x66c0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.138] GetLastError () returned 0x3e5
	[0118.138] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0118.138] GetLastError () returned 0x26
	[0118.138] GetLastError () returned 0x26
	[0118.138] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0118.139] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.139] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.139] CancelIo (hFile=0x38c) returned 1
	[0118.140] CloseHandle (hObject=0x38c) returned 1
	[0118.145] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0118.145] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0118.145] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0118.145] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0118.145] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\dBsAbLJJTrj1-xc3avY.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\dbsabljjtrj1-xc3avy.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\dBsAbLJJTrj1-xc3avY.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\dbsabljjtrj1-xc3avy.wav.crypted")) returned 1
	[0118.146] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0118.146] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.146] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.163] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=10936 | out: Addend=0xe0dacc) returned 6329853
	[0118.163] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x2ac0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.163] GetLastError () returned 0x3e5
	[0118.163] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0118.164] GetLastError () returned 0x26
	[0118.164] GetLastError () returned 0x26
	[0118.164] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0118.164] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.165] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0118.165] CancelIo (hFile=0x38c) returned 1
	[0118.165] CloseHandle (hObject=0x38c) returned 1
	[0118.168] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0118.168] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.168] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0118.169] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0118.169] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\Gh5EemG6C1-kbGu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\gh5eemg6c1-kbgu.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\Gh5EemG6C1-kbGu.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\gh5eemg6c1-kbgu.mp3.crypted")) returned 1
	[0118.170] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0118.170] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0118.170] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.189] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=33959 | out: Addend=0xe0dacc) returned 6340789
	[0118.189] WriteFile (in: hFile=0x3e4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x84b0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.190] GetLastError () returned 0x3e5
	[0118.190] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0118.190] GetLastError () returned 0x26
	[0118.190] GetLastError () returned 0x26
	[0118.190] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0118.190] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.191] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0118.191] CancelIo (hFile=0x3e4) returned 1
	[0118.191] CloseHandle (hObject=0x3e4) returned 1
	[0118.192] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0118.192] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0118.192] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0118.194] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0118.194] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\B_Fk.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\b_fk.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\B_Fk.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\b_fk.mp3.crypted")) returned 1
	[0118.195] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0118.195] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0118.195] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.241] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6374748
	[0118.248] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.250] GetLastError () returned 0x3e5
	[0118.250] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.251] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6866268
	[0118.258] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.259] GetLastError () returned 0x3e5
	[0118.259] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.284] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7357788
	[0118.300] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.304] GetLastError () returned 0x3e5
	[0118.304] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.305] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7849308
	[0118.312] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.313] GetLastError () returned 0x3e5
	[0118.314] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.339] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8340828
	[0118.346] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0118.702] GetLastError () returned 0x3e5
	[0118.702] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.722] ReadFile (in: hFile=0x37c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0118.723] GetLastError () returned 0x3e5
	[0118.724] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.726] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=74320 | out: Addend=0xe0dabc) returned 1966080
	[0118.726] ReadFile (in: hFile=0x37c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0118.726] GetLastError () returned 0x3e5
	[0118.726] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.726] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0118.727] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0118.727] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0118.727] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=74320) returned 1
	[0118.727] WriteFile (in: hFile=0x37c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0118.727] GetLastError () returned 0x3e5
	[0118.727] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0118.727] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.776] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=96955 | out: Addend=0xe0dacc) returned 2531911
	[0118.778] WriteFile (in: hFile=0x3dc, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x17ac0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.779] GetLastError () returned 0x3e5
	[0118.779] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0118.779] GetLastError () returned 0x26
	[0118.779] GetLastError () returned 0x26
	[0118.779] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0118.779] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.780] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351ffc0
	[0118.780] CancelIo (hFile=0x3dc) returned 1
	[0118.780] CloseHandle (hObject=0x3dc) returned 1
	[0118.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0118.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0118.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0118.786] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x4081c98
	[0118.786] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\V5I3fCDGltu02BTLrQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\v5i3fcdgltu02btlrq.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\V5I3fCDGltu02BTLrQ.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\v5i3fcdgltu02btlrq.wav.crypted")) returned 1
	[0118.787] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081c98 | out: hHeap=0x5f0000) returned 1
	[0118.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffc0 | out: hHeap=0x5f0000) returned 1
	[0118.788] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.810] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0118.810] GetLastError () returned 0x3e5
	[0118.810] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.813] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=76608 | out: Addend=0xe0dabc) returned 2137360
	[0118.813] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0118.813] GetLastError () returned 0x3e5
	[0118.813] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.813] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0118.814] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0118.814] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0118.814] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=76608) returned 1
	[0118.814] WriteFile (in: hFile=0x3dc, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.814] GetLastError () returned 0x3e5
	[0118.814] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0118.814] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.846] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=91321 | out: Addend=0xe0dacc) returned 2705467
	[0118.849] WriteFile (in: hFile=0x3dc, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x164c0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.849] GetLastError () returned 0x3e5
	[0118.849] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0118.850] GetLastError () returned 0x26
	[0118.850] GetLastError () returned 0x26
	[0118.850] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0118.850] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.851] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043150
	[0118.851] CancelIo (hFile=0x3dc) returned 1
	[0118.851] CloseHandle (hObject=0x3dc) returned 1
	[0118.854] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0118.854] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043238 | out: hHeap=0x5f0000) returned 1
	[0118.854] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0118.854] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0118.854] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\XVeqQpg-1F.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\xveqqpg-1f.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\XVeqQpg-1F.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\xveqqpg-1f.wav.crypted")) returned 1
	[0118.855] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0118.855] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043150 | out: hHeap=0x5f0000) returned 1
	[0118.855] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.856] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2796788
	[0118.863] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.877] GetLastError () returned 0x3e5
	[0118.877] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.901] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3288308
	[0118.908] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0118.911] GetLastError () returned 0x3e5
	[0118.911] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.912] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3779828
	[0118.918] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.920] GetLastError () returned 0x3e5
	[0118.920] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.944] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4271348
	[0118.951] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.953] GetLastError () returned 0x3e5
	[0118.953] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.954] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4762868
	[0118.960] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.962] GetLastError () returned 0x3e5
	[0118.962] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.985] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5254388
	[0118.992] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.995] GetLastError () returned 0x3e5
	[0118.995] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0118.996] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5745908
	[0119.001] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.003] GetLastError () returned 0x3e5
	[0119.003] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.030] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6237428
	[0119.036] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.040] GetLastError () returned 0x3e5
	[0119.040] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.207] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7048140
	[0119.213] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0119.393] GetLastError () returned 0x3e5
	[0119.393] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.403] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.404] GetLastError () returned 0x3e5
	[0119.404] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.405] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=35856 | out: Addend=0xe0dabc) returned 11471888
	[0119.405] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.405] GetLastError () returned 0x3e5
	[0119.405] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.405] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0119.406] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0119.406] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0119.406] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=35856) returned 1
	[0119.406] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.406] GetLastError () returned 0x3e5
	[0119.406] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.406] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.429] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=67150 | out: Addend=0xe0dacc) returned 11507662
	[0119.430] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x10650, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.430] GetLastError () returned 0x3e5
	[0119.430] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0119.431] GetLastError () returned 0x26
	[0119.431] GetLastError () returned 0x26
	[0119.431] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.431] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.432] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0119.432] CancelIo (hFile=0x38c) returned 1
	[0119.432] CloseHandle (hObject=0x38c) returned 1
	[0119.434] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0119.434] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0119.434] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.435] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0119.435] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\rKuSjn.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\rkusjn.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\rKuSjn.m4a.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\rkusjn.m4a.crypted")) returned 1
	[0119.436] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0119.436] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0119.436] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.456] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.456] GetLastError () returned 0x3e5
	[0119.456] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.457] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=18048 | out: Addend=0xe0dabc) returned 11574896
	[0119.457] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.457] GetLastError () returned 0x3e5
	[0119.457] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.457] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0119.457] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0119.458] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0119.458] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=18048) returned 1
	[0119.458] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.458] GetLastError () returned 0x3e5
	[0119.458] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0119.458] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.505] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0119.505] GetLastError () returned 0x3e5
	[0119.505] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.506] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=5648 | out: Addend=0xe0dabc) returned 11592944
	[0119.506] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0119.506] GetLastError () returned 0x3e5
	[0119.506] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.506] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0119.506] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0119.506] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0119.507] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=5648) returned 1
	[0119.507] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0119.507] GetLastError () returned 0x3e5
	[0119.507] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0119.507] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.531] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=58839 | out: Addend=0xe0dacc) returned 11598489
	[0119.532] WriteFile (in: hFile=0x3ec, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0xe5e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0119.533] GetLastError () returned 0x3e5
	[0119.533] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0119.533] GetLastError () returned 0x26
	[0119.533] GetLastError () returned 0x26
	[0119.533] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0119.533] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.535] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0119.535] CancelIo (hFile=0x3ec) returned 1
	[0119.535] CloseHandle (hObject=0x3ec) returned 1
	[0119.541] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0119.541] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0119.541] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0119.541] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0119.541] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\UzWFP0ndt2.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\uzwfp0ndt2.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\UzWFP0ndt2.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\uzwfp0ndt2.mp3.crypted")) returned 1
	[0119.542] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0119.542] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0119.542] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.552] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 11657440
	[0119.552] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.577] GetLastError () returned 0x3e5
	[0119.577] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.587] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 12148960
	[0119.587] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.587] GetLastError () returned 0x3e5
	[0119.587] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.597] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 12640480
	[0119.597] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.622] GetLastError () returned 0x3e5
	[0119.622] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.635] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0119.635] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.635] GetLastError () returned 0x3e5
	[0119.635] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.645] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0119.645] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.669] GetLastError () returned 0x3e5
	[0119.669] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.680] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0119.681] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.681] GetLastError () returned 0x3e5
	[0119.681] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.691] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474560
	[0119.691] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.708] GetLastError () returned 0x3e5
	[0119.708] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.720] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1966080
	[0119.720] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.721] GetLastError () returned 0x3e5
	[0119.721] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0119.739] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2457600
	[0119.739] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.765] GetLastError () returned 0x3e5
	[0119.766] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0120.030] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3080016
	[0120.030] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0120.238] GetLastError () returned 0x3e5
	[0120.238] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0120.346] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0120.346] GetLastError () returned 0x3e5
	[0120.346] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0120.349] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=95350 | out: Addend=0xe0dacc) returned 7033956
	[0120.351] WriteFile (in: hFile=0x3ec, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x17480, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0120.352] GetLastError () returned 0x3e5
	[0120.352] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0120.355] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=19664 | out: Addend=0xe0dabc) returned 7129392
	[0120.355] ReadFile (in: hFile=0x38c, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0120.355] GetLastError () returned 0x3e5
	[0120.355] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0120.356] GetLastError () returned 0x26
	[0120.357] GetLastError () returned 0x26
	[0120.357] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4ab0020) returned 1
	[0120.357] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0120.360] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0120.360] CancelIo (hFile=0x3e0) returned 1
	[0120.360] CloseHandle (hObject=0x3e0) returned 1
	[0120.368] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0120.369] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0120.369] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0120.369] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0120.369] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\ADPZqqaMpsHc83h.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\adpzqqampshc83h.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\ADPZqqaMpsHc83h.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\adpzqqampshc83h.bmp.crypted")) returned 1
	[0120.371] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0120.371] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0120.371] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0121.361] ReadFile (in: hFile=0x3e0, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0121.362] GetLastError () returned 0x3e5
	[0121.362] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0121.368] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=12143 | out: Addend=0xe0dacc) returned 5287553
	[0121.368] WriteFile (in: hFile=0x3c4, lpBuffer=0x4bb0054*, nNumberOfBytesToWrite=0x2f70, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 1
	[0121.368] GetLastError () returned 0x3e5
	[0121.368] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0121.371] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=67584 | out: Addend=0xe0dabc) returned 5791264
	[0121.371] ReadFile (in: hFile=0x378, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0121.371] GetLastError () returned 0x3e5
	[0121.371] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0121.372] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x6726b8
	[0121.373] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0121.373] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0121.373] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=58528) returned 1
	[0121.373] WriteFile (in: hFile=0x37c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0121.373] GetLastError () returned 0x3e5
	[0121.373] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6726b8 | out: hHeap=0x5f0000) returned 1
	[0121.373] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0121.383] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0121.383] CancelIo (hFile=0x38c) returned 1
	[0121.383] CloseHandle (hObject=0x38c) returned 1
	[0121.388] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0121.388] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0121.388] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0121.389] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0121.389] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\mzmLJF8YYxflwqk6.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\mzmljf8yyxflwqk6.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\mzmLJF8YYxflwqk6.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\mzmljf8yyxflwqk6.bmp.crypted")) returned 1
	[0121.390] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0121.390] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0121.390] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0122.359] ReadFile (in: hFile=0x38c, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 1
	[0122.360] GetLastError () returned 0x3e5
	[0122.360] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0122.364] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=2016 | out: Addend=0xe0dabc) returned 4700016
	[0122.364] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0122.364] GetLastError () returned 0x3e5
	[0122.364] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0122.365] GetLastError () returned 0x26
	[0122.365] GetLastError () returned 0x26
	[0122.365] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4ab0020) returned 1
	[0122.365] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0122.367] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4045560
	[0122.367] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045970
	[0122.368] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045970 | out: hHeap=0x5f0000) returned 1
	[0122.368] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=48624) returned 1
	[0122.368] WriteFile (in: hFile=0x38c, lpBuffer=0x4bb0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 1
	[0122.369] GetLastError () returned 0x3e5
	[0122.369] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045560 | out: hHeap=0x5f0000) returned 1
	[0122.369] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.260] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=22700 | out: Addend=0xe0dacc) returned 3309640
	[0123.260] WriteFile (in: hFile=0x3ec, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x58b0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0123.309] GetLastError () returned 0x3e5
	[0123.309] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.309] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=22704 | out: Addend=0xe0dabc) returned 3309760
	[0123.309] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0123.309] GetLastError () returned 0x3e5
	[0123.309] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0123.309] GetLastError () returned 0x26
	[0123.309] GetLastError () returned 0x26
	[0123.309] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0123.309] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.309] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351b5e0
	[0123.309] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0123.310] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0123.310] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=22704) returned 1
	[0123.310] WriteFile (in: hFile=0x3ec, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0123.310] GetLastError () returned 0x3e5
	[0123.310] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351b5e0 | out: hHeap=0x5f0000) returned 1
	[0123.310] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.310] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043320
	[0123.310] CancelIo (hFile=0x3ec) returned 1
	[0123.310] CloseHandle (hObject=0x3ec) returned 1
	[0123.322] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0123.322] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043150 | out: hHeap=0x5f0000) returned 1
	[0123.322] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0123.323] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0123.323] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\lcsBz1BlcI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\lcsbz1blci.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\lcsBz1BlcI.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\lcsbz1blci.mp4.crypted")) returned 1
	[0123.335] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0123.335] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043320 | out: hHeap=0x5f0000) returned 1
	[0123.335] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.363] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0123.363] GetLastError () returned 0x3e5
	[0123.363] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.364] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=49744 | out: Addend=0xe0dabc) returned 3441152
	[0123.364] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.365] GetLastError () returned 0x3e5
	[0123.365] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.365] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0123.365] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3519ac0
	[0123.365] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3519ac0 | out: hHeap=0x5f0000) returned 1
	[0123.365] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=49744) returned 1
	[0123.365] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.365] GetLastError () returned 0x3e5
	[0123.365] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.365] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.391] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=87370 | out: Addend=0xe0dacc) returned 3490749
	[0123.393] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x15550, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.393] GetLastError () returned 0x3e5
	[0123.393] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0123.393] GetLastError () returned 0x26
	[0123.393] GetLastError () returned 0x26
	[0123.393] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.394] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.394] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0123.394] CancelIo (hFile=0x3d8) returned 1
	[0123.394] CloseHandle (hObject=0x3d8) returned 1
	[0123.396] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351b4e8 | out: hHeap=0x5f0000) returned 1
	[0123.396] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0123.396] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.397] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0123.397] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\qybdYBQm.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\qybdybqm.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\qybdYBQm.swf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\qybdybqm.swf.crypted")) returned 1
	[0123.398] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0123.398] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0123.398] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.418] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0123.418] GetLastError () returned 0x3e5
	[0123.418] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.419] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=22688 | out: Addend=0xe0dabc) returned 3578272
	[0123.419] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.420] GetLastError () returned 0x3e5
	[0123.420] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.420] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351b4e8
	[0123.420] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0123.420] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0123.420] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=22688) returned 1
	[0123.420] WriteFile (in: hFile=0x3ec, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.420] GetLastError () returned 0x3e5
	[0123.420] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351b4e8 | out: hHeap=0x5f0000) returned 1
	[0123.420] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.464] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=44960 | out: Addend=0xe0dacc) returned 3600803
	[0123.465] WriteFile (in: hFile=0x3ec, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0xafa0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.465] GetLastError () returned 0x3e5
	[0123.465] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0123.466] GetLastError () returned 0x26
	[0123.466] GetLastError () returned 0x26
	[0123.466] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0123.466] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.467] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0123.467] CancelIo (hFile=0x3ec) returned 1
	[0123.467] CloseHandle (hObject=0x3ec) returned 1
	[0123.470] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0123.470] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0123.470] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0123.470] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40402b8
	[0123.470] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\ROtrMwa4DrpBY.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\rotrmwa4drpby.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\ROtrMwa4DrpBY.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\rotrmwa4drpby.mp4.crypted")) returned 1
	[0123.471] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40402b8 | out: hHeap=0x5f0000) returned 1
	[0123.471] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0123.471] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.500] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3645763
	[0123.508] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.510] GetLastError () returned 0x3e5
	[0123.510] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.530] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4137283
	[0123.537] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.540] GetLastError () returned 0x3e5
	[0123.540] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.543] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0123.544] GetLastError () returned 0x3e5
	[0123.544] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.545] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=42144 | out: Addend=0xe0dabc) returned 4628960
	[0123.545] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0123.545] GetLastError () returned 0x3e5
	[0123.545] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.546] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0123.546] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0123.546] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0123.546] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=42144) returned 1
	[0123.546] WriteFile (in: hFile=0x3ec, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.546] GetLastError () returned 0x3e5
	[0123.546] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0123.546] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.620] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=95163 | out: Addend=0xe0dacc) returned 5653972
	[0123.622] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x173c0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.623] GetLastError () returned 0x3e5
	[0123.623] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0123.623] GetLastError () returned 0x26
	[0123.623] GetLastError () returned 0x26
	[0123.623] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0123.623] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.624] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.624] CancelIo (hFile=0x3e0) returned 1
	[0123.624] CloseHandle (hObject=0x3e0) returned 1
	[0123.627] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0123.627] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0123.627] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0123.628] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0123.628] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\hIdF485eJOBzjY.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\hidf485ejobzjy.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\hIdF485eJOBzjY.avi.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\hidf485ejobzjy.avi.crypted")) returned 1
	[0123.637] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0123.637] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.637] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.638] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5749135
	[0123.652] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.654] GetLastError () returned 0x3e5
	[0123.654] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.675] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6240655
	[0123.679] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.682] GetLastError () returned 0x3e5
	[0123.682] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.683] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6732175
	[0123.687] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.689] GetLastError () returned 0x3e5
	[0123.689] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0123.883] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 68382
	[0123.890] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0124.149] GetLastError () returned 0x3e5
	[0124.149] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.216] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=226 | out: Addend=0xe0dacc) returned 5966622
	[0124.216] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0124.216] GetLastError () returned 0x3e5
	[0124.216] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0124.222] GetLastError () returned 0x26
	[0124.222] GetLastError () returned 0x26
	[0124.222] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0124.222] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.223] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0124.224] CancelIo (hFile=0x3dc) returned 1
	[0124.224] CloseHandle (hObject=0x3dc) returned 1
	[0124.224] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0124.224] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0124.224] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0124.225] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0124.225] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url.crypted" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url.crypted")) returned 1
	[0124.225] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0124.226] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0124.226] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.261] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 5475344
	[0124.261] ReadFile (in: hFile=0x378, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0124.262] GetLastError () returned 0x3e5
	[0124.262] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.262] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0124.262] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0124.262] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0124.262] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=144) returned 1
	[0124.262] WriteFile (in: hFile=0x378, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0124.263] GetLastError () returned 0x3e5
	[0124.263] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0124.263] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.420] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6458501
	[0124.426] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.430] GetLastError () returned 0x3e5
	[0124.430] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.432] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6950021
	[0124.439] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.441] GetLastError () returned 0x3e5
	[0124.441] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0124.472] GetLastError () returned 0x26
	[0124.472] GetLastError () returned 0x26
	[0124.472] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0124.472] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.473] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0124.473] CancelIo (hFile=0x3d8) returned 1
	[0124.473] CloseHandle (hObject=0x3d8) returned 1
	[0124.473] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0124.473] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0124.473] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0124.474] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0124.474] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.crypted" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url.crypted")) returned 1
	[0124.474] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0124.474] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0124.475] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.542] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7933194
	[0124.548] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.550] GetLastError () returned 0x3e5
	[0124.550] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.578] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8424714
	[0124.584] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.587] GetLastError () returned 0x3e5
	[0124.587] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.590] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8916234
	[0124.596] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.598] GetLastError () returned 0x3e5
	[0124.598] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.600] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9407754
	[0124.606] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.608] GetLastError () returned 0x3e5
	[0124.608] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.636] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9899274
	[0124.643] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.645] GetLastError () returned 0x3e5
	[0124.646] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.647] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10390794
	[0124.654] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.656] GetLastError () returned 0x3e5
	[0124.656] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.680] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10882314
	[0124.687] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.690] GetLastError () returned 0x3e5
	[0124.690] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.692] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 11373834
	[0124.699] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.701] GetLastError () returned 0x3e5
	[0124.701] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0124.907] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 267
	[0124.914] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0125.034] GetLastError () returned 0x3e5
	[0125.034] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.053] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 2457867
	[0125.053] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.054] GetLastError () returned 0x3e5
	[0125.054] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0125.054] GetLastError () returned 0x26
	[0125.054] GetLastError () returned 0x26
	[0125.054] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0125.054] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.056] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0125.056] CancelIo (hFile=0x3d8) returned 1
	[0125.056] CloseHandle (hObject=0x3d8) returned 1
	[0125.056] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0125.056] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0125.056] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0125.057] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0125.057] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url.crypted" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url.crypted")) returned 1
	[0125.058] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0125.058] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0125.058] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.074] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2458000
	[0125.082] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.084] GetLastError () returned 0x3e5
	[0125.084] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.114] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2949520
	[0125.124] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.127] GetLastError () returned 0x3e5
	[0125.127] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.129] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3441040
	[0125.137] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.138] GetLastError () returned 0x3e5
	[0125.139] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.172] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 3932592
	[0125.172] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0125.172] GetLastError () returned 0x3e5
	[0125.172] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.173] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0125.173] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0125.173] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0125.173] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=144) returned 1
	[0125.173] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.174] GetLastError () returned 0x3e5
	[0125.174] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0125.174] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.273] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 3932736
	[0125.273] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0125.273] GetLastError () returned 0x3e5
	[0125.273] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.273] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0125.274] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0125.274] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0125.274] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=144) returned 1
	[0125.274] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.274] GetLastError () returned 0x3e5
	[0125.274] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0125.274] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.306] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3932880
	[0125.306] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.308] GetLastError () returned 0x3e5
	[0125.308] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.318] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4424400
	[0125.318] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.319] GetLastError () returned 0x3e5
	[0125.319] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.329] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4915920
	[0125.329] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.359] GetLastError () returned 0x3e5
	[0125.359] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.371] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5407440
	[0125.372] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.374] GetLastError () returned 0x3e5
	[0125.374] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.383] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5898960
	[0125.383] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.407] GetLastError () returned 0x3e5
	[0125.407] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.418] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6390480
	[0125.418] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.419] GetLastError () returned 0x3e5
	[0125.419] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.429] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6882000
	[0125.429] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.456] GetLastError () returned 0x3e5
	[0125.456] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.467] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7373520
	[0125.467] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.468] GetLastError () returned 0x3e5
	[0125.468] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.477] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7865040
	[0125.477] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.502] GetLastError () returned 0x3e5
	[0125.503] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.525] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8356704
	[0125.525] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0125.603] GetLastError () returned 0x3e5
	[0125.603] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.624] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 10322719
	[0125.624] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.624] GetLastError () returned 0x3e5
	[0125.624] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0125.625] GetLastError () returned 0x26
	[0125.625] GetLastError () returned 0x26
	[0125.625] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0125.625] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.626] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0125.626] CancelIo (hFile=0x3d8) returned 1
	[0125.626] CloseHandle (hObject=0x3d8) returned 1
	[0125.627] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0125.627] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0125.627] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0125.627] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0125.627] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN.url.crypted" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url.crypted")) returned 1
	[0125.629] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0125.629] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0125.629] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.662] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10322852
	[0125.669] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.673] GetLastError () returned 0x3e5
	[0125.673] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.675] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10814372
	[0125.684] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.686] GetLastError () returned 0x3e5
	[0125.686] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.704] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 11305892
	[0125.710] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.714] GetLastError () returned 0x3e5
	[0125.714] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.716] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 11797412
	[0125.723] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.724] GetLastError () returned 0x3e5
	[0125.725] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.761] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 12288932
	[0125.772] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.773] GetLastError () returned 0x3e5
	[0125.773] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.776] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 12780452
	[0125.783] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.785] GetLastError () returned 0x3e5
	[0125.785] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.787] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 13271972
	[0125.794] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.796] GetLastError () returned 0x3e5
	[0125.796] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.819] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 13763492
	[0125.841] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0125.845] GetLastError () returned 0x3e5
	[0125.845] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.878] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=467 | out: Addend=0xe0dacc) returned 14255145
	[0125.878] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.879] GetLastError () returned 0x3e5
	[0125.879] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0125.879] GetLastError () returned 0x26
	[0125.879] GetLastError () returned 0x26
	[0125.879] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0125.879] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0125.880] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0125.880] CancelIo (hFile=0x3dc) returned 1
	[0125.880] CloseHandle (hObject=0x3dc) returned 1
	[0125.881] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0125.881] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0125.881] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0125.882] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0125.882] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), lpNewFileName="C:\\\\Users\\Default\\Links\\Desktop.lnk.crypted" (normalized: "c:\\users\\default\\links\\desktop.lnk.crypted")) returned 1
	[0125.882] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0125.882] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0125.882] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.045] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0126.051] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.053] GetLastError () returned 0x3e5
	[0126.053] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.077] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0126.083] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.085] GetLastError () returned 0x3e5
	[0126.085] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.093] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0126.099] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.101] GetLastError () returned 0x3e5
	[0126.101] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.199] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=896 | out: Addend=0xe0dabc) returned 1474560
	[0126.199] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0126.203] GetLastError () returned 0x3e5
	[0126.203] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.204] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=368 | out: Addend=0xe0dabc) returned 1475456
	[0126.204] ReadFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0126.204] GetLastError () returned 0x3e5
	[0126.204] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.205] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0126.205] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0126.205] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0126.205] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=368) returned 1
	[0126.205] WriteFile (in: hFile=0x3d8, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0126.206] GetLastError () returned 0x3e5
	[0126.206] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0126.206] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.220] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1475824
	[0126.220] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0126.696] GetLastError () returned 0x3e5
	[0126.696] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.732] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=876 | out: Addend=0xe0dacc) returned 5905452
	[0126.733] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.733] GetLastError () returned 0x3e5
	[0126.733] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0126.742] GetLastError () returned 0x26
	[0126.742] GetLastError () returned 0x26
	[0126.742] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0126.742] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.743] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0126.743] CancelIo (hFile=0x3dc) returned 1
	[0126.743] CloseHandle (hObject=0x3dc) returned 1
	[0126.744] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0126.744] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0126.744] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0126.744] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0126.744] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), lpNewFileName="C:\\\\Users\\Public\\Libraries\\RecordedTV.library-ms.crypted" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms.crypted")) returned 1
	[0126.745] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0126.745] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0126.745] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.776] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5906328
	[0126.782] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.784] GetLastError () returned 0x3e5
	[0126.784] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.808] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6397848
	[0126.815] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0126.816] GetLastError () returned 0x3e5
	[0126.816] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.871] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0126.886] GetLastError () returned 0x3e5
	[0126.886] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.900] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0126.904] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.906] GetLastError () returned 0x3e5
	[0126.906] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.936] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0126.942] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.967] GetLastError () returned 0x3e5
	[0126.967] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0126.979] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474560
	[0126.986] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0126.987] GetLastError () returned 0x3e5
	[0126.988] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0127.256] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0127.283] GetLastError () returned 0x3e5
	[0127.283] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0127.293] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6389760
	[0127.293] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0127.509] GetLastError () returned 0x3e5
	[0127.509] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0127.519] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9830400
	[0127.519] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0127.544] GetLastError () returned 0x3e5
	[0127.544] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0127.555] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10321920
	[0127.555] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0127.564] GetLastError () returned 0x3e5
	[0127.564] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0127.573] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10813440
	[0127.573] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0127.896] GetLastError () returned 0x3e5
	[0127.896] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0127.902] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 18113625
	[0127.909] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0127.911] GetLastError () returned 0x3e5
	[0127.911] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0127.937] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0127.954] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0x0
	[0127.957] GetLastError () returned 0x3e5
	[0127.957] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0127.973] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0127.973] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.976] GetLastError () returned 0x3e5
	[0127.976] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.049] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0128.049] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0128.051] GetLastError () returned 0x3e5
	[0128.051] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.093] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0128.093] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0128.124] GetLastError () returned 0x3e5
	[0128.124] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.134] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474560
	[0128.134] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0128.136] GetLastError () returned 0x3e5
	[0128.136] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.148] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1966080
	[0128.148] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0128.171] GetLastError () returned 0x3e5
	[0128.171] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.535] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5096928
	[0128.535] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0128.545] GetLastError () returned 0x3e5
	[0128.545] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.708] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6079954
	[0128.715] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0128.717] GetLastError () returned 0x3e5
	[0128.717] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.739] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6571474
	[0128.746] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0128.750] GetLastError () returned 0x3e5
	[0128.750] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.752] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7062994
	[0128.760] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0x0
	[0128.762] GetLastError () returned 0x3e5
	[0128.762] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.781] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0128.863] GetLastError () returned 0x3e5
	[0128.863] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.876] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=387874 | out: Addend=0xe0dacc) returned 9087683
	[0128.883] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x5eb30, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0128.884] GetLastError () returned 0x3e5
	[0128.884] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0128.885] GetLastError () returned 0x26
	[0128.886] GetLastError () returned 0x26
	[0128.886] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0128.886] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.887] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0128.887] CancelIo (hFile=0x378) returned 1
	[0128.887] CloseHandle (hObject=0x378) returned 1
	[0128.887] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0128.887] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0128.887] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0128.888] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0128.888] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.crypted" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.crypted")) returned 1
	[0128.889] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0128.889] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0128.889] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.916] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9967120
	[0128.916] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0128.918] GetLastError () returned 0x3e5
	[0128.919] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0128.966] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0129.042] GetLastError () returned 0x3e5
	[0129.042] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0129.051] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0129.051] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0129.211] GetLastError () returned 0x3e5
	[0129.211] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0129.218] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=284192 | out: Addend=0xe0dabc) returned 1828992
	[0129.218] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0129.218] GetLastError () returned 0x3e5
	[0129.218] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0129.218] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0129.218] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0129.218] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0129.219] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=775712) returned 1
	[0129.219] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0129.219] GetLastError () returned 0x3e5
	[0129.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0129.219] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0129.343] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2604683
	[0129.348] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0129.363] GetLastError () returned 0x3e5
	[0129.363] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0129.394] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0129.499] GetLastError () returned 0x3e5
	[0129.499] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0129.511] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x6726b8
	[0129.511] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0129.512] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0129.512] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x249f400 | out: lpFileSize=0x249f400*=777840) returned 1
	[0129.512] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0129.512] GetLastError () returned 0x3e5
	[0129.512] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6726b8 | out: hHeap=0x5f0000) returned 1
	[0129.512] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0129.530] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=129376 | out: Addend=0xe0dabc) returned 5637936
	[0129.530] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0129.530] GetLastError () returned 0x3e5
	[0129.530] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0129.548] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6258797
	[0129.554] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0129.556] GetLastError () returned 0x3e5
	[0129.556] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0135.124] GetLastError () returned 0x102
	[0135.124] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0135.187] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474560
	[0135.191] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.192] GetLastError () returned 0x3e5
	[0135.192] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0135.218] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1966080
	[0135.225] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.229] GetLastError () returned 0x3e5
	[0135.229] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0135.231] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2457600
	[0135.238] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.240] GetLastError () returned 0x3e5
	[0135.240] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0135.265] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2949120
	[0135.271] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.276] GetLastError () returned 0x3e5
	[0135.276] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0135.299] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3932160
	[0135.305] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0135.308] GetLastError () returned 0x3e5
	[0135.308] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0135.309] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=131090 | out: Addend=0xe0dacc) returned 4423680
	[0135.311] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x20020, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0135.312] GetLastError () returned 0x3e5
	[0135.312] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 0
	[0135.313] GetLastError () returned 0x26
	[0135.313] GetLastError () returned 0x26
	[0135.313] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x48b0020) returned 1
	[0135.313] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0135.314] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0135.314] CancelIo (hFile=0x3ac) returned 1
	[0135.314] CloseHandle (hObject=0x3ac) returned 1
	[0135.314] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35195b0 | out: hHeap=0x5f0000) returned 1
	[0135.314] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633000 | out: hHeap=0x5f0000) returned 1
	[0135.314] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x48b0020 | out: hHeap=0x5f0000) returned 1
	[0135.315] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0135.316] MoveFileW (lpExistingFileName="C:\\\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim"), lpNewFileName="C:\\\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim.crypted" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim.crypted")) returned 1
	[0135.317] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0135.317] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0135.317] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0135.361] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5046304
	[0135.361] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.386] GetLastError () returned 0x3e5
	[0135.386] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0135.395] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5537824
	[0135.395] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.396] GetLastError () returned 0x3e5
	[0135.396] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0135.404] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6029344
	[0135.404] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.405] GetLastError () returned 0x3e5
	[0135.406] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0135.413] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6520864
	[0135.413] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.433] GetLastError () returned 0x3e5
	[0135.434] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c) returned 1
	[0135.441] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7012384
	[0135.441] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0135.501] GetLastError () returned 0x3e5
	[0135.501] GetQueuedCompletionStatus (CompletionPort=0xc8, lpNumberOfBytesTransferred=0x249f378, lpCompletionKey=0x249f40c, lpOverlapped=0x249f36c, dwMilliseconds=0x1388) 

Thread:
	id = 3
	os_tid = 0x57c

	[0057.802] GetCurrentThreadId () returned 0x57c
	[0057.802] GetCurrentThreadId () returned 0x57c
	[0057.802] GetLastError () returned 0x57
	[0057.802] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x364) returned 0x6111f8
	[0057.802] SetLastError (dwErrCode=0x57) 
	[0057.802] GetLastError () returned 0x57
	[0057.802] SetLastError (dwErrCode=0x57) 
	[0057.803] WriteFile (in: hFile=0x7, lpBuffer=0x237dbd8*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x237dbd0, lpOverlapped=0x0 | out: lpBuffer=0x237dbd8*, lpNumberOfBytesWritten=0x237dbd0*=0x49, lpOverlapped=0x0) returned 1
	[0057.804] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0074.932] GetLastError () returned 0x102
	[0074.932] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0080.305] GetLastError () returned 0x102
	[0080.305] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0085.656] GetLastError () returned 0x102
	[0085.657] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0090.794] GetLastError () returned 0x102
	[0090.794] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0095.812] GetLastError () returned 0x102
	[0095.812] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0101.121] GetLastError () returned 0x102
	[0101.121] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0109.983] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0109.989] WriteFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0x0
	[0109.991] GetLastError () returned 0x3e5
	[0109.991] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.002] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0110.002] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0110.011] GetLastError () returned 0x3e5
	[0110.011] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.035] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0110.035] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0110.065] GetLastError () returned 0x3e5
	[0110.066] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.090] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2457600
	[0110.097] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.099] GetLastError () returned 0x3e5
	[0110.099] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.103] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2949120
	[0110.110] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.112] GetLastError () returned 0x3e5
	[0110.112] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.133] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3440640
	[0110.150] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.152] GetLastError () returned 0x3e5
	[0110.152] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.166] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0110.173] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.175] GetLastError () returned 0x3e5
	[0110.175] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.202] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0110.209] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.211] GetLastError () returned 0x3e5
	[0110.211] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.214] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0110.220] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.222] GetLastError () returned 0x3e5
	[0110.222] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.250] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474560
	[0110.257] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.260] GetLastError () returned 0x3e5
	[0110.260] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.571] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3732561
	[0110.578] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0110.739] GetLastError () returned 0x3e5
	[0110.739] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.746] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=1171 | out: Addend=0xe0dacc) returned 7173201
	[0110.746] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.746] GetLastError () returned 0x3e5
	[0110.746] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0110.746] GetLastError () returned 0x26
	[0110.746] GetLastError () returned 0x26
	[0110.746] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.746] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.747] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0110.747] CancelIo (hFile=0x3c0) returned 1
	[0110.747] CloseHandle (hObject=0x3c0) returned 1
	[0110.748] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0110.748] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633088 | out: hHeap=0x5f0000) returned 1
	[0110.748] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0110.749] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0110.749] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.crypted")) returned 1
	[0110.750] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0110.750] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0110.750] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.750] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=1174 | out: Addend=0xe0dacc) returned 7174372
	[0110.750] WriteFile (in: hFile=0x3c4, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0110.750] GetLastError () returned 0x3e5
	[0110.750] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0110.751] GetLastError () returned 0x26
	[0110.751] GetLastError () returned 0x26
	[0110.751] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4ab0020) returned 1
	[0110.751] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.752] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0110.752] CancelIo (hFile=0x3c4) returned 1
	[0110.752] CloseHandle (hObject=0x3c4) returned 1
	[0110.765] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0110.765] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0110.765] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4ab0020 | out: hHeap=0x5f0000) returned 1
	[0110.766] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0110.766] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.crypted")) returned 1
	[0110.766] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0110.766] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0110.766] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.783] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.783] GetLastError () returned 0x3e5
	[0110.783] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.783] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=1184 | out: Addend=0xe0dabc) returned 7667104
	[0110.783] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0110.783] GetLastError () returned 0x3e5
	[0110.783] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.783] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0110.784] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0110.784] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0110.784] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=1184) returned 1
	[0110.784] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.784] GetLastError () returned 0x3e5
	[0110.784] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0110.784] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.805] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=88451 | out: Addend=0xe0dacc) returned 7176718
	[0110.806] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x15990, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.807] GetLastError () returned 0x3e5
	[0110.807] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0110.807] GetLastError () returned 0x26
	[0110.807] GetLastError () returned 0x26
	[0110.807] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.807] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.808] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0110.808] CancelIo (hFile=0x3c4) returned 1
	[0110.808] CloseHandle (hObject=0x3c4) returned 1
	[0110.815] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0110.815] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.815] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0110.816] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0110.816] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2_y.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2_y.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2_y.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2_y.gif.crypted")) returned 1
	[0110.817] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0110.817] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0110.817] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.831] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.831] GetLastError () returned 0x3e5
	[0110.831] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.832] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=50592 | out: Addend=0xe0dabc) returned 7756752
	[0110.832] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0110.833] GetLastError () returned 0x3e5
	[0110.833] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.833] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0110.833] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0110.833] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0110.833] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=50592) returned 1
	[0110.833] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.833] GetLastError () returned 0x3e5
	[0110.833] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0110.833] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.853] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=98582 | out: Addend=0xe0dacc) returned 7315758
	[0110.855] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x18120, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.855] GetLastError () returned 0x3e5
	[0110.855] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0110.856] GetLastError () returned 0x26
	[0110.856] GetLastError () returned 0x26
	[0110.856] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.856] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.857] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0110.857] CancelIo (hFile=0x3c4) returned 1
	[0110.857] CloseHandle (hObject=0x3c4) returned 1
	[0110.860] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0110.861] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0110.861] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0110.861] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0110.861] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bDKvYp.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bdkvyp.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bDKvYp.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bdkvyp.mp4.crypted")) returned 1
	[0110.862] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0110.862] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0110.862] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.875] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.876] GetLastError () returned 0x3e5
	[0110.876] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.877] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=22288 | out: Addend=0xe0dabc) returned 7905936
	[0110.877] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0110.877] GetLastError () returned 0x3e5
	[0110.877] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.877] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0110.877] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0110.877] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0110.877] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=22288) returned 1
	[0110.877] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.877] GetLastError () returned 0x3e5
	[0110.877] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0110.878] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.898] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=62162 | out: Addend=0xe0dacc) returned 7436626
	[0110.899] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0xf2e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.900] GetLastError () returned 0x3e5
	[0110.900] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0110.900] GetLastError () returned 0x26
	[0110.900] GetLastError () returned 0x26
	[0110.900] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.900] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.901] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633088
	[0110.901] CancelIo (hFile=0x3c4) returned 1
	[0110.901] CloseHandle (hObject=0x3c4) returned 1
	[0110.912] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0110.912] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0110.913] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0110.913] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0110.913] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CN2Yu0ZsD1xs5.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cn2yu0zsd1xs5.ppt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CN2Yu0ZsD1xs5.ppt.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cn2yu0zsd1xs5.ppt.crypted")) returned 1
	[0110.914] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0110.914] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633088 | out: hHeap=0x5f0000) returned 1
	[0110.914] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.928] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.928] GetLastError () returned 0x3e5
	[0110.928] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.929] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=43520 | out: Addend=0xe0dabc) returned 7990400
	[0110.929] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0110.929] GetLastError () returned 0x3e5
	[0110.929] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.929] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0110.929] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0110.930] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0110.930] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=43520) returned 1
	[0110.930] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.930] GetLastError () returned 0x3e5
	[0110.930] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0110.930] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.993] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=44053 | out: Addend=0xe0dacc) returned 7542306
	[0110.994] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0xac20, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.994] GetLastError () returned 0x3e5
	[0110.994] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0110.994] GetLastError () returned 0x26
	[0110.994] GetLastError () returned 0x26
	[0110.995] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.995] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0110.996] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0110.996] CancelIo (hFile=0x3c4) returned 1
	[0110.996] CloseHandle (hObject=0x3c4) returned 1
	[0111.004] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0111.005] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0111.005] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0111.005] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0111.005] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FdV5 UwoXLQ.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fdv5 uwoxlq.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FdV5 UwoXLQ.csv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fdv5 uwoxlq.csv.crypted")) returned 1
	[0111.006] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0111.006] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0111.006] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.023] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.023] GetLastError () returned 0x3e5
	[0111.023] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.025] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=44240 | out: Addend=0xe0dabc) returned 8077984
	[0111.025] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0111.025] GetLastError () returned 0x3e5
	[0111.025] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.025] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351dff0
	[0111.025] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351e400
	[0111.025] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351e400 | out: hHeap=0x5f0000) returned 1
	[0111.026] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=44240) returned 1
	[0111.026] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.026] GetLastError () returned 0x3e5
	[0111.026] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0111.026] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.046] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=97091 | out: Addend=0xe0dacc) returned 7630585
	[0111.048] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x17b50, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.048] GetLastError () returned 0x3e5
	[0111.048] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0111.049] GetLastError () returned 0x26
	[0111.049] GetLastError () returned 0x26
	[0111.049] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.049] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.050] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0111.050] CancelIo (hFile=0x3c0) returned 1
	[0111.050] CloseHandle (hObject=0x3c0) returned 1
	[0111.051] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dae0 | out: hHeap=0x5f0000) returned 1
	[0111.051] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0111.051] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0111.052] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0111.052] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\g42u5H.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\g42u5h.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\g42u5H.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\g42u5h.mp4.crypted")) returned 1
	[0111.053] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0111.053] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0111.053] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.068] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.069] GetLastError () returned 0x3e5
	[0111.069] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.071] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=75904 | out: Addend=0xe0dabc) returned 8219328
	[0111.071] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0111.071] GetLastError () returned 0x3e5
	[0111.071] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.071] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351dff0
	[0111.071] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351e400
	[0111.071] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351e400 | out: hHeap=0x5f0000) returned 1
	[0111.071] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=75904) returned 1
	[0111.071] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.071] GetLastError () returned 0x3e5
	[0111.072] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0111.072] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.098] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=53055 | out: Addend=0xe0dacc) returned 7803571
	[0111.099] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0xcf40, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.099] GetLastError () returned 0x3e5
	[0111.099] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0111.100] GetLastError () returned 0x26
	[0111.100] GetLastError () returned 0x26
	[0111.100] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.100] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.101] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0111.101] CancelIo (hFile=0x3c0) returned 1
	[0111.101] CloseHandle (hObject=0x3c0) returned 1
	[0111.246] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dae0 | out: hHeap=0x5f0000) returned 1
	[0111.246] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0111.246] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0111.247] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3510048
	[0111.247] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\WJ4vLnFoRTTcZId.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\wj4vlnforttczid.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\WJ4vLnFoRTTcZId.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\wj4vlnforttczid.wav.crypted")) returned 1
	[0111.248] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510048 | out: hHeap=0x5f0000) returned 1
	[0111.248] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0111.248] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.263] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0111.263] GetLastError () returned 0x3e5
	[0111.263] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.265] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=70336 | out: Addend=0xe0dabc) returned 983040
	[0111.265] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0111.265] GetLastError () returned 0x3e5
	[0111.265] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.265] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351dae0
	[0111.265] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351def0
	[0111.265] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351def0 | out: hHeap=0x5f0000) returned 1
	[0111.265] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=70336) returned 1
	[0111.265] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.265] GetLastError () returned 0x3e5
	[0111.266] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dae0 | out: hHeap=0x5f0000) returned 1
	[0111.266] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.289] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=56486 | out: Addend=0xe0dacc) returned 561846
	[0111.290] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xdcb0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.290] GetLastError () returned 0x3e5
	[0111.290] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0111.290] GetLastError () returned 0x26
	[0111.290] GetLastError () returned 0x26
	[0111.290] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0111.290] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.291] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0111.291] CancelIo (hFile=0x3c0) returned 1
	[0111.291] CloseHandle (hObject=0x3c0) returned 1
	[0111.300] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0111.300] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0111.300] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0111.301] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0111.301] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\bpw79uT.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\bpw79ut.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\bpw79uT.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\bpw79ut.bmp.crypted")) returned 1
	[0111.302] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0111.302] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0111.302] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.316] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0111.316] GetLastError () returned 0x3e5
	[0111.316] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.317] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=9088 | out: Addend=0xe0dabc) returned 1109872
	[0111.317] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0111.317] GetLastError () returned 0x3e5
	[0111.317] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.317] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351dae0
	[0111.317] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351def0
	[0111.317] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351def0 | out: hHeap=0x5f0000) returned 1
	[0111.317] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=9088) returned 1
	[0111.317] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.317] GetLastError () returned 0x3e5
	[0111.317] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dae0 | out: hHeap=0x5f0000) returned 1
	[0111.317] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.342] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=27224 | out: Addend=0xe0dacc) returned 627416
	[0111.343] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x6a60, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.343] GetLastError () returned 0x3e5
	[0111.343] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0111.343] GetLastError () returned 0x26
	[0111.343] GetLastError () returned 0x26
	[0111.343] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0111.343] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.344] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0111.344] CancelIo (hFile=0x3c0) returned 1
	[0111.344] CloseHandle (hObject=0x3c0) returned 1
	[0111.348] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0111.349] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0111.349] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0111.349] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3510110
	[0111.349] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\fCuusX4CV6rTKR6S.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\fcuusx4cv6rtkr6s.ppt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\fCuusX4CV6rTKR6S.ppt.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\fcuusx4cv6rtkr6s.ppt.crypted")) returned 1
	[0111.350] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510110 | out: hHeap=0x5f0000) returned 1
	[0111.350] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0111.350] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.365] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0111.365] GetLastError () returned 0x3e5
	[0111.366] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.367] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=60896 | out: Addend=0xe0dabc) returned 1146192
	[0111.367] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0111.367] GetLastError () returned 0x3e5
	[0111.367] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.367] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351dae0
	[0111.368] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351def0
	[0111.368] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351def0 | out: hHeap=0x5f0000) returned 1
	[0111.368] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=60896) returned 1
	[0111.368] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.368] GetLastError () returned 0x3e5
	[0111.368] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dae0 | out: hHeap=0x5f0000) returned 1
	[0111.368] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.387] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=10998 | out: Addend=0xe0dacc) returned 715534
	[0111.387] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x2b00, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.387] GetLastError () returned 0x3e5
	[0111.387] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0111.388] GetLastError () returned 0x26
	[0111.388] GetLastError () returned 0x26
	[0111.388] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0111.388] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.389] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0111.389] CancelIo (hFile=0x3c0) returned 1
	[0111.389] CloseHandle (hObject=0x3c0) returned 1
	[0111.395] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0111.395] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0111.395] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0111.395] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0111.395] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\qPQBIwc1V.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\qpqbiwc1v.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\qPQBIwc1V.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\qpqbiwc1v.bmp.crypted")) returned 1
	[0111.396] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0111.396] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0111.396] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.412] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0111.413] GetLastError () returned 0x3e5
	[0111.413] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.414] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=48944 | out: Addend=0xe0dabc) returned 1218096
	[0111.414] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0111.414] GetLastError () returned 0x3e5
	[0111.414] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.415] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351dae0
	[0111.415] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351def0
	[0111.415] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351def0 | out: hHeap=0x5f0000) returned 1
	[0111.415] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=48944) returned 1
	[0111.415] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.415] GetLastError () returned 0x3e5
	[0111.415] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dae0 | out: hHeap=0x5f0000) returned 1
	[0111.415] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.438] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1267040
	[0111.438] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.439] GetLastError () returned 0x3e5
	[0111.439] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.447] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1758560
	[0111.447] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.468] GetLastError () returned 0x3e5
	[0111.468] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.477] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2250080
	[0111.477] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.478] GetLastError () returned 0x3e5
	[0111.478] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.486] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2741600
	[0111.486] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.506] GetLastError () returned 0x3e5
	[0111.506] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.515] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3233120
	[0111.515] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.515] GetLastError () returned 0x3e5
	[0111.515] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.522] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3724640
	[0111.522] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.538] GetLastError () returned 0x3e5
	[0111.538] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.546] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4216160
	[0111.546] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.546] GetLastError () returned 0x3e5
	[0111.546] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.552] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4707680
	[0111.552] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0111.564] GetLastError () returned 0x3e5
	[0111.564] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.581] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=88106 | out: Addend=0xe0dacc) returned 4707624
	[0111.582] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x15830, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.583] GetLastError () returned 0x3e5
	[0111.583] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0111.583] GetLastError () returned 0x26
	[0111.583] GetLastError () returned 0x26
	[0111.583] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0111.583] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.584] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0111.584] CancelIo (hFile=0x3c4) returned 1
	[0111.584] CloseHandle (hObject=0x3c4) returned 1
	[0111.585] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0111.585] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0111.585] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0111.586] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0111.586] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j722vbf_9c6.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j722vbf_9c6.pps"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j722vbf_9c6.pps.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j722vbf_9c6.pps.crypted")) returned 1
	[0111.587] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0111.587] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0111.587] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.601] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0111.601] GetLastError () returned 0x3e5
	[0111.601] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.957] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=87280 | out: Addend=0xe0dabc) returned 10776224
	[0111.957] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0111.963] GetLastError () returned 0x3e5
	[0111.963] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.992] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=38368 | out: Addend=0xe0dabc) returned 10863504
	[0111.992] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0111.992] GetLastError () returned 0x3e5
	[0111.992] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0111.992] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0111.992] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351dff0
	[0111.993] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0111.993] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=38368) returned 1
	[0111.993] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.993] GetLastError () returned 0x3e5
	[0111.993] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0111.993] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0117.210] GetLastError () returned 0x102
	[0117.210] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.224] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 4340237
	[0117.224] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.224] GetLastError () returned 0x3e5
	[0117.224] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0117.224] GetLastError () returned 0x26
	[0117.224] GetLastError () returned 0x26
	[0117.224] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.225] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.226] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0117.226] CancelIo (hFile=0x3e0) returned 1
	[0117.226] CloseHandle (hObject=0x3e0) returned 1
	[0117.228] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.228] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0117.229] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0117.229] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url.crypted")) returned 1
	[0117.230] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0117.230] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0117.230] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.251] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 4340370
	[0117.251] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.251] GetLastError () returned 0x3e5
	[0117.251] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0117.251] GetLastError () returned 0x26
	[0117.252] GetLastError () returned 0x26
	[0117.252] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.252] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.253] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0117.253] CancelIo (hFile=0x3e0) returned 1
	[0117.253] CloseHandle (hObject=0x3e0) returned 1
	[0117.256] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.256] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0117.256] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.258] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0117.258] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url.crypted")) returned 1
	[0117.258] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0117.258] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0117.258] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.284] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4340688
	[0117.284] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.285] GetLastError () returned 0x3e5
	[0117.285] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.291] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4832208
	[0117.291] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.292] GetLastError () returned 0x3e5
	[0117.292] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.298] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5323728
	[0117.298] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.319] GetLastError () returned 0x3e5
	[0117.319] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.327] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5815248
	[0117.327] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.327] GetLastError () returned 0x3e5
	[0117.327] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.328] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 6306768
	[0117.329] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.329] GetLastError () returned 0x3e5
	[0117.329] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.329] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.329] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.329] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.329] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=144) returned 1
	[0117.329] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.330] GetLastError () returned 0x3e5
	[0117.330] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.330] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.355] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6798236
	[0117.370] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.373] GetLastError () returned 0x3e5
	[0117.373] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.374] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7289756
	[0117.381] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.383] GetLastError () returned 0x3e5
	[0117.383] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.405] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7781276
	[0117.409] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.411] GetLastError () returned 0x3e5
	[0117.411] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.412] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8272796
	[0117.417] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.418] GetLastError () returned 0x3e5
	[0117.418] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.437] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8764316
	[0117.441] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.443] GetLastError () returned 0x3e5
	[0117.443] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.445] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9255836
	[0117.449] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.450] GetLastError () returned 0x3e5
	[0117.450] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.476] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9747356
	[0117.483] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.485] GetLastError () returned 0x3e5
	[0117.486] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.487] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10238876
	[0117.494] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.496] GetLastError () returned 0x3e5
	[0117.496] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.520] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10730396
	[0117.661] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0117.710] GetLastError () returned 0x3e5
	[0117.710] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.718] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=75001 | out: Addend=0xe0dacc) returned 984818
	[0117.719] WriteFile (in: hFile=0x3ec, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x12500, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0117.719] GetLastError () returned 0x3e5
	[0117.720] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0117.720] GetLastError () returned 0x26
	[0117.720] GetLastError () returned 0x26
	[0117.720] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0117.720] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.721] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0117.722] CancelIo (hFile=0x3ec) returned 1
	[0117.722] CloseHandle (hObject=0x3ec) returned 1
	[0117.724] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.724] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0117.724] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0117.726] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0117.726] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5k272oFhyqM0yt7I\\f6QnSQ6d.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5k272ofhyqm0yt7i\\f6qnsq6d.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5k272oFhyqM0yt7I\\f6QnSQ6d.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5k272ofhyqm0yt7i\\f6qnsq6d.mp3.crypted")) returned 1
	[0117.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0117.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0117.728] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.742] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.742] GetLastError () returned 0x3e5
	[0117.742] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.743] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=32944 | out: Addend=0xe0dabc) returned 1551376
	[0117.743] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.743] GetLastError () returned 0x3e5
	[0117.743] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.743] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.743] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.743] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.743] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=32944) returned 1
	[0117.744] WriteFile (in: hFile=0x3ec, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.744] GetLastError () returned 0x3e5
	[0117.744] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.744] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.763] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=67791 | out: Addend=0xe0dacc) returned 1092755
	[0117.764] WriteFile (in: hFile=0x3ec, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x108d0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.765] GetLastError () returned 0x3e5
	[0117.765] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0117.765] GetLastError () returned 0x26
	[0117.765] GetLastError () returned 0x26
	[0117.765] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.765] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.766] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0117.766] CancelIo (hFile=0x3ec) returned 1
	[0117.766] CloseHandle (hObject=0x3ec) returned 1
	[0117.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0117.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0117.768] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5k272oFhyqM0yt7I\\Vc-t29By6hfo-iZj2XDg.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5k272ofhyqm0yt7i\\vc-t29by6hfo-izj2xdg.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5k272oFhyqM0yt7I\\Vc-t29By6hfo-iZj2XDg.m4a.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5k272ofhyqm0yt7i\\vc-t29by6hfo-izj2xdg.m4a.crypted")) returned 1
	[0117.769] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0117.769] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0117.769] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.784] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.785] GetLastError () returned 0x3e5
	[0117.785] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.786] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=89184 | out: Addend=0xe0dabc) returned 1652112
	[0117.786] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.786] GetLastError () returned 0x3e5
	[0117.786] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.787] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.787] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.787] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.788] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=89184) returned 1
	[0117.788] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.788] GetLastError () returned 0x3e5
	[0117.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.788] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.811] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=27632 | out: Addend=0xe0dacc) returned 1249726
	[0117.811] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x6bf0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.811] GetLastError () returned 0x3e5
	[0117.811] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0117.812] GetLastError () returned 0x26
	[0117.812] GetLastError () returned 0x26
	[0117.812] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.812] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.813] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0117.813] CancelIo (hFile=0x3d8) returned 1
	[0117.813] CloseHandle (hObject=0x3d8) returned 1
	[0117.814] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.814] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0117.814] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.815] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0117.815] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\9KugnplPwxU uN1T.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\9kugnplpwxu un1t.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\9KugnplPwxU uN1T.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\9kugnplpwxu un1t.mp3.crypted")) returned 1
	[0117.816] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0117.816] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0117.816] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.833] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.833] GetLastError () returned 0x3e5
	[0117.834] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.835] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=50496 | out: Addend=0xe0dabc) returned 1768928
	[0117.835] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.835] GetLastError () returned 0x3e5
	[0117.835] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.835] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.836] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.836] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.836] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=50496) returned 1
	[0117.836] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.836] GetLastError () returned 0x3e5
	[0117.836] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.836] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.859] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=47793 | out: Addend=0xe0dacc) returned 1327839
	[0117.860] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xbac0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.860] GetLastError () returned 0x3e5
	[0117.860] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0117.861] GetLastError () returned 0x26
	[0117.861] GetLastError () returned 0x26
	[0117.861] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.861] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.862] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0117.862] CancelIo (hFile=0x3c4) returned 1
	[0117.862] CloseHandle (hObject=0x3c4) returned 1
	[0117.863] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.863] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.864] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.864] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0117.864] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\-vymBKk.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\-vymbkk.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\-vymBKk.m4a.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\-vymbkk.m4a.crypted")) returned 1
	[0117.878] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0117.878] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0117.878] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.888] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1867232
	[0117.888] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.913] GetLastError () returned 0x3e5
	[0117.913] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.923] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2358752
	[0117.923] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.923] GetLastError () returned 0x3e5
	[0117.923] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.932] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2850272
	[0117.932] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.932] GetLastError () returned 0x3e5
	[0117.932] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.940] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3341792
	[0117.940] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.962] GetLastError () returned 0x3e5
	[0117.962] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.969] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3833312
	[0117.969] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.969] GetLastError () returned 0x3e5
	[0117.969] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0117.978] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4324832
	[0117.978] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.000] GetLastError () returned 0x3e5
	[0118.000] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0118.010] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4816352
	[0118.010] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.010] GetLastError () returned 0x3e5
	[0118.010] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0118.018] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5307872
	[0118.018] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.038] GetLastError () returned 0x3e5
	[0118.038] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0118.045] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5799392
	[0118.045] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.046] GetLastError () returned 0x3e5
	[0118.046] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0118.074] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=5920 | out: Addend=0xe0dacc) returned 6290832
	[0118.074] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0118.074] GetLastError () returned 0x3e5
	[0118.074] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0118.075] GetLastError () returned 0x26
	[0118.075] GetLastError () returned 0x26
	[0118.075] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0118.075] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0118.076] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0118.076] CancelIo (hFile=0x3c4) returned 1
	[0118.076] CloseHandle (hObject=0x3c4) returned 1
	[0118.351] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0118.351] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0118.351] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0118.352] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0118.352] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\7Y6RFTBxGqHtaBV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\7y6rftbxgqhtabv.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\7Y6RFTBxGqHtaBV.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\7y6rftbxgqhtabv.mp3.crypted")) returned 1
	[0118.353] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0118.353] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0118.353] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0118.489] ReadFile (in: hFile=0x3e4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0118.490] GetLastError () returned 0x3e5
	[0118.490] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0118.494] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=68031 | out: Addend=0xe0dacc) returned 8875143
	[0118.495] WriteFile (in: hFile=0x3f4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x109c0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0118.496] GetLastError () returned 0x3e5
	[0118.496] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0118.501] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=51792 | out: Addend=0xe0dabc) returned 8943296
	[0118.501] ReadFile (in: hFile=0x3f8, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0118.501] GetLastError () returned 0x3e5
	[0118.501] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0118.503] GetLastError () returned 0x26
	[0118.503] GetLastError () returned 0x26
	[0118.503] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4bb0020) returned 1
	[0118.503] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0118.508] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0118.508] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4049050
	[0118.508] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4049050 | out: hHeap=0x5f0000) returned 1
	[0118.508] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=56528) returned 1
	[0118.508] WriteFile (in: hFile=0x3c4, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0118.509] GetLastError () returned 0x3e5
	[0118.509] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0118.509] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.363] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=58528 | out: Addend=0xe0dacc) returned 5088289
	[0121.364] WriteFile (in: hFile=0x37c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xe4a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0121.365] GetLastError () returned 0x3e5
	[0121.365] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.370] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=14352 | out: Addend=0xe0dabc) returned 5638368
	[0121.370] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0121.370] GetLastError () returned 0x3e5
	[0121.370] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0121.372] GetLastError () returned 0x26
	[0121.372] GetLastError () returned 0x26
	[0121.372] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0121.372] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.374] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x6726b8
	[0121.374] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0121.374] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0121.375] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=87888) returned 1
	[0121.375] WriteFile (in: hFile=0x3e0, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0121.375] GetLastError () returned 0x3e5
	[0121.375] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6726b8 | out: hHeap=0x5f0000) returned 1
	[0121.375] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.398] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0121.398] CancelIo (hFile=0x3c4) returned 1
	[0121.398] CloseHandle (hObject=0x3c4) returned 1
	[0121.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671c98 | out: hHeap=0x5f0000) returned 1
	[0121.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0121.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4bb0020 | out: hHeap=0x5f0000) returned 1
	[0121.401] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0121.401] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\wwtws9.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\wwtws9.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\wwtws9.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\wwtws9.bmp.crypted")) returned 1
	[0121.402] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0121.402] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0121.402] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.423] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5858848
	[0121.423] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.425] GetLastError () returned 0x3e5
	[0121.425] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.432] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6350368
	[0121.432] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.455] GetLastError () returned 0x3e5
	[0121.455] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.463] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6841888
	[0121.463] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.465] GetLastError () returned 0x3e5
	[0121.465] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.472] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7333408
	[0121.472] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.495] GetLastError () returned 0x3e5
	[0121.495] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.504] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7824928
	[0121.504] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.504] GetLastError () returned 0x3e5
	[0121.504] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.511] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8316448
	[0121.511] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.533] GetLastError () returned 0x3e5
	[0121.533] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.542] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8807968
	[0121.542] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.543] GetLastError () returned 0x3e5
	[0121.543] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.551] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9299488
	[0121.551] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.568] GetLastError () returned 0x3e5
	[0121.568] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.579] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9791008
	[0121.579] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.581] GetLastError () returned 0x3e5
	[0121.581] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.588] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10282528
	[0121.588] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0121.605] GetLastError () returned 0x3e5
	[0121.605] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.615] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=66445 | out: Addend=0xe0dacc) returned 10282466
	[0121.642] WriteFile (in: hFile=0x3f8, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x10390, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0121.643] GetLastError () returned 0x3e5
	[0121.643] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0121.643] GetLastError () returned 0x26
	[0121.643] GetLastError () returned 0x26
	[0121.643] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4db0020) returned 1
	[0121.643] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.644] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0121.644] CancelIo (hFile=0x3f8) returned 1
	[0121.644] CloseHandle (hObject=0x3f8) returned 1
	[0121.647] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0121.647] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0121.647] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4db0020 | out: hHeap=0x5f0000) returned 1
	[0121.648] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0121.648] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\3lfth77S0R Wpm6GyTL.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\3lfth77s0r wpm6gytl.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\3lfth77S0R Wpm6GyTL.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\3lfth77s0r wpm6gytl.gif.crypted")) returned 1
	[0121.649] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0121.649] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0121.649] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.665] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0121.665] GetLastError () returned 0x3e5
	[0121.665] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.667] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=45712 | out: Addend=0xe0dabc) returned 10840496
	[0121.667] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0121.667] GetLastError () returned 0x3e5
	[0121.667] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.667] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0121.667] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0121.667] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0121.667] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=45712) returned 1
	[0121.668] WriteFile (in: hFile=0x3f8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0121.668] GetLastError () returned 0x3e5
	[0121.668] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0121.668] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0121.879] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=38152 | out: Addend=0xe0dacc) returned 1966080
	[0121.879] WriteFile (in: hFile=0x3f8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x9510, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.045] GetLastError () returned 0x3e5
	[0122.045] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.412] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0122.412] GetLastError () returned 0x3e5
	[0122.412] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.415] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=50240 | out: Addend=0xe0dabc) returned 4907648
	[0122.415] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0122.415] GetLastError () returned 0x3e5
	[0122.415] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.415] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x672790
	[0122.415] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0122.416] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0122.416] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=50240) returned 1
	[0122.416] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0122.416] GetLastError () returned 0x3e5
	[0122.416] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0122.416] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.447] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4957888
	[0122.447] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.449] GetLastError () returned 0x3e5
	[0122.449] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.460] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5449408
	[0122.460] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.486] GetLastError () returned 0x3e5
	[0122.486] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.493] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5940928
	[0122.493] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.494] GetLastError () returned 0x3e5
	[0122.494] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.500] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6432448
	[0122.500] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.516] GetLastError () returned 0x3e5
	[0122.516] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.530] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6923968
	[0122.530] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.530] GetLastError () returned 0x3e5
	[0122.530] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.537] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7415488
	[0122.537] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.560] GetLastError () returned 0x3e5
	[0122.560] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.569] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7907008
	[0122.569] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.570] GetLastError () returned 0x3e5
	[0122.570] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.577] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8398528
	[0122.577] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.604] GetLastError () returned 0x3e5
	[0122.604] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.621] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8890048
	[0122.621] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.623] GetLastError () returned 0x3e5
	[0122.623] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.634] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9381568
	[0122.634] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.636] GetLastError () returned 0x3e5
	[0122.636] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.649] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9873088
	[0122.649] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0122.668] GetLastError () returned 0x3e5
	[0122.668] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.716] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=52680 | out: Addend=0xe0dacc) returned 10364522
	[0122.717] WriteFile (in: hFile=0x37c, lpBuffer=0x4cb0054, nNumberOfBytesToWrite=0xcdd0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 0
	[0122.730] GetLastError () returned 0x3e5
	[0122.730] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.751] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0122.758] GetLastError () returned 0x3e5
	[0122.758] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.789] ReadFile (in: hFile=0x37c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0122.796] GetLastError () returned 0x3e5
	[0122.796] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.815] ReadFile (in: hFile=0x3b8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0122.824] GetLastError () returned 0x3e5
	[0122.824] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.847] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0122.854] GetLastError () returned 0x3e5
	[0122.854] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.869] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 542177
	[0122.874] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0122.928] GetLastError () returned 0x3e5
	[0122.928] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.962] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=47157 | out: Addend=0xe0dacc) returned 2508257
	[0122.963] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToWrite=0xb840, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 0
	[0122.969] GetLastError () returned 0x3e5
	[0122.969] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0122.986] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0122.993] GetLastError () returned 0x3e5
	[0122.993] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.010] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.017] GetLastError () returned 0x3e5
	[0123.017] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.036] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.045] GetLastError () returned 0x3e5
	[0123.045] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.062] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.069] GetLastError () returned 0x3e5
	[0123.069] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.087] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.099] GetLastError () returned 0x3e5
	[0123.099] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.116] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.124] GetLastError () returned 0x3e5
	[0123.124] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.141] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.150] GetLastError () returned 0x3e5
	[0123.150] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.170] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.197] GetLastError () returned 0x3e5
	[0123.197] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.215] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.218] GetLastError () returned 0x3e5
	[0123.218] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.240] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0123.242] GetLastError () returned 0x3e5
	[0123.242] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.260] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0123.260] GetLastError () returned 0x3e5
	[0123.261] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.279] ReadFile (in: hFile=0x3b8, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0123.282] GetLastError () returned 0x3e5
	[0123.282] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.299] ReadFile (in: hFile=0x378, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 1
	[0123.299] GetLastError () returned 0x3e5
	[0123.299] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0123.299] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=14856 | out: Addend=0xe0dacc) returned 3426163
	[0123.299] WriteFile (in: hFile=0x378, lpBuffer=0x4bb0054*, nNumberOfBytesToWrite=0x3a10, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 1
	[0123.318] GetLastError () returned 0x3e5
	[0123.318] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0123.325] GetLastError () returned 0x26
	[0123.325] GetLastError () returned 0x26
	[0123.325] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4bb0020) returned 1
	[0123.332] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0126.201] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.201] CancelIo (hFile=0x3dc) returned 1
	[0126.201] CloseHandle (hObject=0x3dc) returned 1
	[0126.201] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0126.201] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0126.201] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0126.202] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.202] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), lpNewFileName="C:\\\\Users\\Default\\Links\\Downloads.lnk.crypted" (normalized: "c:\\users\\default\\links\\downloads.lnk.crypted")) returned 1
	[0126.203] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.203] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0126.203] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.023] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.030] GetLastError () returned 0x3e5
	[0127.030] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.040] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474560
	[0127.040] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.047] GetLastError () returned 0x3e5
	[0127.047] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.059] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1966080
	[0127.059] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.085] GetLastError () returned 0x3e5
	[0127.085] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.095] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2457600
	[0127.095] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.103] GetLastError () returned 0x3e5
	[0127.103] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.111] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2949120
	[0127.111] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.135] GetLastError () returned 0x3e5
	[0127.135] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.145] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3440640
	[0127.146] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.158] GetLastError () returned 0x3e5
	[0127.158] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.167] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3932160
	[0127.167] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.183] GetLastError () returned 0x3e5
	[0127.183] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.193] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4423680
	[0127.193] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.194] GetLastError () returned 0x3e5
	[0127.195] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.203] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4915200
	[0127.203] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.218] GetLastError () returned 0x3e5
	[0127.218] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.259] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5406720
	[0127.259] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0127.753] GetLastError () returned 0x3e5
	[0127.753] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.755] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 14672985
	[0127.763] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.765] GetLastError () returned 0x3e5
	[0127.765] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.792] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 15164505
	[0127.798] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.801] GetLastError () returned 0x3e5
	[0127.801] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.804] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 15656025
	[0127.810] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.812] GetLastError () returned 0x3e5
	[0127.812] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.848] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 16147552
	[0127.848] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0127.854] GetLastError () returned 0x3e5
	[0127.854] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.863] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 16639072
	[0127.863] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0127.878] GetLastError () returned 0x3e5
	[0127.878] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.888] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 17130592
	[0127.888] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0127.890] GetLastError () returned 0x3e5
	[0127.890] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0127.911] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 18113632
	[0127.911] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0127.937] GetLastError () returned 0x3e5
	[0127.937] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0128.437] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3130848
	[0128.437] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0128.534] GetLastError () returned 0x3e5
	[0128.534] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0128.537] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5588434
	[0128.543] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0128.545] GetLastError () returned 0x3e5
	[0128.545] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0128.717] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6079968
	[0128.717] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0128.739] GetLastError () returned 0x3e5
	[0128.739] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0128.750] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6571488
	[0128.750] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0128.752] GetLastError () returned 0x3e5
	[0128.752] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0128.779] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7063008
	[0128.779] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0128.780] GetLastError () returned 0x3e5
	[0128.780] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0128.815] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8046048
	[0128.815] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0128.839] GetLastError () returned 0x3e5
	[0128.839] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0128.867] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8596163
	[0128.874] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0128.876] GetLastError () returned 0x3e5
	[0128.876] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0128.885] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=387888 | out: Addend=0xe0dabc) returned 9087712
	[0128.885] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0128.885] GetLastError () returned 0x3e5
	[0128.885] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0128.886] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x671c98
	[0128.886] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0128.886] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0128.886] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x237f6b0 | out: lpFileSize=0x237f6b0*=879408) returned 1
	[0128.887] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0128.887] GetLastError () returned 0x3e5
	[0128.887] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671c98 | out: hHeap=0x5f0000) returned 1
	[0128.887] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0128.971] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0128.971] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0128.999] GetLastError () returned 0x3e5
	[0128.999] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0129.397] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0129.484] GetLastError () returned 0x3e5
	[0129.484] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0129.506] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0129.547] GetLastError () returned 0x3e5
	[0129.547] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0129.567] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6258832
	[0129.567] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0129.679] GetLastError () returned 0x3e5
	[0129.679] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0129.688] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7345648
	[0129.688] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0130.140] GetLastError () returned 0x3e5
	[0130.140] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0130.141] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1966080
	[0130.147] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0130.149] GetLastError () returned 0x3e5
	[0130.149] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0130.164] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2457600
	[0130.171] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0130.175] GetLastError () returned 0x3e5
	[0130.175] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0130.337] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2949120
	[0130.337] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0130.792] GetLastError () returned 0x3e5
	[0130.793] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.039] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0133.043] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.044] GetLastError () returned 0x3e5
	[0133.044] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.063] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0133.067] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.069] GetLastError () returned 0x3e5
	[0133.069] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.070] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0133.074] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.076] GetLastError () returned 0x3e5
	[0133.076] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.095] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474560
	[0133.099] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.101] GetLastError () returned 0x3e5
	[0133.101] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.102] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1966080
	[0133.106] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.108] GetLastError () returned 0x3e5
	[0133.108] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.133] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2457600
	[0133.190] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0133.285] GetLastError () returned 0x3e5
	[0133.285] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.329] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5898240
	[0133.333] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.335] GetLastError () returned 0x3e5
	[0133.335] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.336] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6389760
	[0133.342] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.343] GetLastError () returned 0x3e5
	[0133.343] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.357] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6881280
	[0133.362] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.365] GetLastError () returned 0x3e5
	[0133.365] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.366] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7372800
	[0133.370] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.371] GetLastError () returned 0x3e5
	[0133.371] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.384] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7864320
	[0133.388] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.391] GetLastError () returned 0x3e5
	[0133.405] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.413] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7864320
	[0133.413] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.435] GetLastError () returned 0x3e5
	[0133.435] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.445] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8355840
	[0133.445] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.447] GetLastError () returned 0x3e5
	[0133.447] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.454] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8847360
	[0133.454] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.467] GetLastError () returned 0x3e5
	[0133.467] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.475] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9338880
	[0133.475] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0133.750] GetLastError () returned 0x3e5
	[0133.750] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.787] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 17203200
	[0133.794] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.797] GetLastError () returned 0x3e5
	[0133.797] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.800] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 17694720
	[0133.806] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.809] GetLastError () returned 0x3e5
	[0133.809] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.835] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 18186240
	[0133.843] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.846] GetLastError () returned 0x3e5
	[0133.846] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0133.849] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 18677760
	[0134.084] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0134.167] GetLastError () returned 0x3e5
	[0134.167] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0134.169] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474560
	[0134.176] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0134.178] GetLastError () returned 0x3e5
	[0134.178] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0134.192] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=360448 | out: Addend=0xe0dacc) returned 1966080
	[0134.199] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x58000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0134.201] GetLastError () returned 0x3e5
	[0134.201] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 0
	[0134.201] GetLastError () returned 0x26
	[0134.201] GetLastError () returned 0x26
	[0134.201] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4cb0020) returned 1
	[0134.201] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0134.204] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0134.204] CancelIo (hFile=0x3b8) returned 1
	[0134.204] CloseHandle (hObject=0x3b8) returned 1
	[0134.205] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6721a8 | out: hHeap=0x5f0000) returned 1
	[0134.205] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0134.205] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4cb0020 | out: hHeap=0x5f0000) returned 1
	[0134.205] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0134.206] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), lpNewFileName="C:\\\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.crypted" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv.crypted")) returned 1
	[0134.208] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0134.208] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0134.208] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0134.261] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3309568
	[0134.261] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.263] GetLastError () returned 0x3e5
	[0134.263] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0134.268] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3801088
	[0134.268] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.294] GetLastError () returned 0x3e5
	[0134.295] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0134.300] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4292608
	[0134.300] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.302] GetLastError () returned 0x3e5
	[0134.302] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0134.307] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4784128
	[0134.307] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.338] GetLastError () returned 0x3e5
	[0134.338] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0134.345] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5275648
	[0134.345] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.346] GetLastError () returned 0x3e5
	[0134.346] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0134.351] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5767168
	[0134.351] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0135.080] GetLastError () returned 0x3e5
	[0135.080] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0135.084] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0135.093] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0135.095] GetLastError () returned 0x3e5
	[0135.095] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0135.111] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0135.118] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0135.121] GetLastError () returned 0x3e5
	[0135.121] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0135.276] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3440640
	[0135.282] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0
	[0135.317] GetLastError () returned 0x3e5
	[0135.317] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0135.355] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4554770
	[0135.360] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.361] GetLastError () returned 0x3e5
	[0135.361] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0135.386] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5046290
	[0135.392] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.395] GetLastError () returned 0x3e5
	[0135.395] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0135.396] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5537810
	[0135.402] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.404] GetLastError () returned 0x3e5
	[0135.404] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0135.406] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6029330
	[0135.411] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.413] GetLastError () returned 0x3e5
	[0135.413] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0135.434] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6520850
	[0135.438] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.440] GetLastError () returned 0x3e5
	[0135.440] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0135.449] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7503904
	[0135.449] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.461] GetLastError () returned 0x3e5
	[0135.461] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0135.472] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7995424
	[0135.472] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.473] GetLastError () returned 0x3e5
	[0135.473] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c) returned 1
	[0135.481] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8486944
	[0135.481] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.495] GetLastError () returned 0x3e5
	[0135.495] GetQueuedCompletionStatus (CompletionPort=0xc8, lpNumberOfBytesTransferred=0x237f628, lpCompletionKey=0x237f6bc, lpOverlapped=0x237f61c, dwMilliseconds=0x1388) 

Thread:
	id = 4
	os_tid = 0x10c

	[0057.804] GetCurrentThreadId () returned 0x10c
	[0057.804] GetCurrentThreadId () returned 0x10c
	[0057.804] GetLastError () returned 0x57
	[0057.804] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x364) returned 0x611778
	[0057.804] SetLastError (dwErrCode=0x57) 
	[0057.804] GetLastError () returned 0x57
	[0057.804] SetLastError (dwErrCode=0x57) 
	[0057.805] WriteFile (in: hFile=0x7, lpBuffer=0x25bdaf8*, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0x25bdaf0, lpOverlapped=0x0 | out: lpBuffer=0x25bdaf8*, lpNumberOfBytesWritten=0x25bdaf0*=0x47, lpOverlapped=0x0) returned 1
	[0057.806] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0074.932] GetLastError () returned 0x102
	[0074.932] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0080.305] GetLastError () returned 0x102
	[0080.305] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0085.657] GetLastError () returned 0x102
	[0085.657] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0090.794] GetLastError () returned 0x102
	[0090.794] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0095.812] GetLastError () returned 0x102
	[0095.812] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0101.121] GetLastError () returned 0x102
	[0101.121] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.317] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=1178 | out: Addend=0xe0dacc) returned 1966080
	[0110.317] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.318] GetLastError () returned 0x3e5
	[0110.318] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0110.318] GetLastError () returned 0x26
	[0110.318] GetLastError () returned 0x26
	[0110.318] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.318] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.319] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0110.320] CancelIo (hFile=0x3c0) returned 1
	[0110.320] CloseHandle (hObject=0x3c0) returned 1
	[0110.329] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0110.329] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633088 | out: hHeap=0x5f0000) returned 1
	[0110.329] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0110.330] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0110.330] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.crypted")) returned 1
	[0110.331] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0110.331] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0110.331] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.352] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.353] GetLastError () returned 0x3e5
	[0110.353] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.355] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=68384 | out: Addend=0xe0dabc) returned 1967264
	[0110.355] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0110.355] GetLastError () returned 0x3e5
	[0110.355] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.355] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfe8
	[0110.355] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d3f8
	[0110.355] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d3f8 | out: hHeap=0x5f0000) returned 1
	[0110.355] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=68384) returned 1
	[0110.355] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.356] GetLastError () returned 0x3e5
	[0110.356] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0110.356] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.395] ReadFile (in: hFile=0x3c4, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0110.395] GetLastError () returned 0x3e5
	[0110.395] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.395] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=1184 | out: Addend=0xe0dabc) returned 2035648
	[0110.395] ReadFile (in: hFile=0x3c4, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0110.395] GetLastError () returned 0x3e5
	[0110.395] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.396] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d4f8
	[0110.396] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d908
	[0110.396] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d908 | out: hHeap=0x5f0000) returned 1
	[0110.396] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=1184) returned 1
	[0110.396] WriteFile (in: hFile=0x3c4, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0110.396] GetLastError () returned 0x3e5
	[0110.396] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d4f8 | out: hHeap=0x5f0000) returned 1
	[0110.396] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.432] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2528352
	[0110.432] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0110.452] GetLastError () returned 0x3e5
	[0110.452] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.461] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3019872
	[0110.462] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0110.462] GetLastError () returned 0x3e5
	[0110.462] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.471] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3511392
	[0110.471] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0110.483] GetLastError () returned 0x3e5
	[0110.483] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.488] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=221184 | out: Addend=0xe0dabc) returned 4002912
	[0110.488] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0110.488] GetLastError () returned 0x3e5
	[0110.488] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.488] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d4f8
	[0110.488] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d908
	[0110.489] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d908 | out: hHeap=0x5f0000) returned 1
	[0110.489] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=3170304) returned 1
	[0110.489] WriteFile (in: hFile=0x3a8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0110.489] GetLastError () returned 0x3e5
	[0110.489] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d4f8 | out: hHeap=0x5f0000) returned 1
	[0110.489] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.605] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4224081
	[0110.612] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.615] GetLastError () returned 0x3e5
	[0110.615] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.618] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4715601
	[0110.640] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.642] GetLastError () returned 0x3e5
	[0110.642] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.669] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5207121
	[0110.675] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.679] GetLastError () returned 0x3e5
	[0110.679] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.682] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5698641
	[0110.688] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.690] GetLastError () returned 0x3e5
	[0110.690] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.717] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6190161
	[0110.723] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.727] GetLastError () returned 0x3e5
	[0110.727] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0110.728] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6681681
	[0110.736] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.738] GetLastError () returned 0x3e5
	[0110.738] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.142] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7949674
	[0111.147] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0111.245] GetLastError () returned 0x3e5
	[0111.245] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.263] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=70326 | out: Addend=0xe0dacc) returned 491520
	[0111.264] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x112c0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.265] GetLastError () returned 0x3e5
	[0111.265] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0111.265] GetLastError () returned 0x26
	[0111.265] GetLastError () returned 0x26
	[0111.265] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0111.265] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.266] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x4081f08
	[0111.266] CancelIo (hFile=0x3c0) returned 1
	[0111.266] CloseHandle (hObject=0x3c0) returned 1
	[0111.272] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0111.272] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510110 | out: hHeap=0x5f0000) returned 1
	[0111.272] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0111.273] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x3510110
	[0111.273] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\3b2UJTWoz6ufeXlyvISW.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\3b2ujtwoz6ufexlyvisw.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\3b2UJTWoz6ufeXlyvISW.png.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\3b2ujtwoz6ufexlyvisw.png.crypted")) returned 1
	[0111.274] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510110 | out: hHeap=0x5f0000) returned 1
	[0111.274] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081f08 | out: hHeap=0x5f0000) returned 1
	[0111.274] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.288] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0111.289] GetLastError () returned 0x3e5
	[0111.289] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.290] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=56496 | out: Addend=0xe0dabc) returned 1053376
	[0111.290] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0111.290] GetLastError () returned 0x3e5
	[0111.290] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.290] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351dae0
	[0111.290] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351def0
	[0111.291] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351def0 | out: hHeap=0x5f0000) returned 1
	[0111.291] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=56496) returned 1
	[0111.291] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.291] GetLastError () returned 0x3e5
	[0111.291] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dae0 | out: hHeap=0x5f0000) returned 1
	[0111.291] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.316] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=9084 | out: Addend=0xe0dacc) returned 618332
	[0111.316] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x2380, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.316] GetLastError () returned 0x3e5
	[0111.317] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0111.317] GetLastError () returned 0x26
	[0111.317] GetLastError () returned 0x26
	[0111.317] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0111.317] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.317] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0111.318] CancelIo (hFile=0x3c0) returned 1
	[0111.318] CloseHandle (hObject=0x3c0) returned 1
	[0111.320] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0111.321] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0111.321] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0111.321] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0111.321] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\CzpEkctADL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\czpekctadl.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\CzpEkctADL.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\czpekctadl.mp3.crypted")) returned 1
	[0111.322] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0111.322] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0111.322] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.342] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0111.342] GetLastError () returned 0x3e5
	[0111.342] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.343] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=27232 | out: Addend=0xe0dabc) returned 1118960
	[0111.343] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0111.343] GetLastError () returned 0x3e5
	[0111.343] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.343] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351dae0
	[0111.343] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351def0
	[0111.344] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351def0 | out: hHeap=0x5f0000) returned 1
	[0111.344] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=27232) returned 1
	[0111.344] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.344] GetLastError () returned 0x3e5
	[0111.344] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dae0 | out: hHeap=0x5f0000) returned 1
	[0111.344] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.366] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=60894 | out: Addend=0xe0dacc) returned 654640
	[0111.367] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xede0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.367] GetLastError () returned 0x3e5
	[0111.367] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0111.367] GetLastError () returned 0x26
	[0111.367] GetLastError () returned 0x26
	[0111.367] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0111.367] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.368] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0111.368] CancelIo (hFile=0x3c0) returned 1
	[0111.368] CloseHandle (hObject=0x3c0) returned 1
	[0111.370] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0111.370] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0111.370] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0111.371] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3510110
	[0111.371] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\iB_721DN-zYKJuMnIh.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\ib_721dn-zykjumnih.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\iB_721DN-zYKJuMnIh.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\ib_721dn-zykjumnih.mp4.crypted")) returned 1
	[0111.372] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510110 | out: hHeap=0x5f0000) returned 1
	[0111.372] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0111.372] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.387] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0111.387] GetLastError () returned 0x3e5
	[0111.387] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.387] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=11008 | out: Addend=0xe0dabc) returned 1207088
	[0111.388] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0111.388] GetLastError () returned 0x3e5
	[0111.388] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.388] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351dae0
	[0111.388] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351def0
	[0111.388] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351def0 | out: hHeap=0x5f0000) returned 1
	[0111.388] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=11008) returned 1
	[0111.388] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.388] GetLastError () returned 0x3e5
	[0111.388] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dae0 | out: hHeap=0x5f0000) returned 1
	[0111.388] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.413] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=48932 | out: Addend=0xe0dacc) returned 726532
	[0111.414] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xbf30, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0111.414] GetLastError () returned 0x3e5
	[0111.414] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0111.414] GetLastError () returned 0x26
	[0111.414] GetLastError () returned 0x26
	[0111.414] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0111.415] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.415] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0111.416] CancelIo (hFile=0x3c0) returned 1
	[0111.416] CloseHandle (hObject=0x3c0) returned 1
	[0111.418] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0111.418] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0111.418] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0111.419] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0111.419] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\uVCMJbA.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\uvcmjba.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\uVCMJbA.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\uvcmjba.mp3.crypted")) returned 1
	[0111.419] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0111.420] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0111.420] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.429] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 775464
	[0111.435] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.438] GetLastError () returned 0x3e5
	[0111.438] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.439] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1266984
	[0111.445] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.446] GetLastError () returned 0x3e5
	[0111.446] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.469] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1758504
	[0111.474] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.477] GetLastError () returned 0x3e5
	[0111.477] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.478] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2250024
	[0111.484] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.486] GetLastError () returned 0x3e5
	[0111.486] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.506] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2741544
	[0111.511] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.514] GetLastError () returned 0x3e5
	[0111.514] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.516] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3233064
	[0111.520] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.522] GetLastError () returned 0x3e5
	[0111.522] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.538] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3724584
	[0111.542] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.545] GetLastError () returned 0x3e5
	[0111.545] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.546] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4216104
	[0111.550] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.552] GetLastError () returned 0x3e5
	[0111.552] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.758] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4965152
	[0111.764] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0111.956] GetLastError () returned 0x3e5
	[0111.956] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0111.957] GetLastError () returned 0x26
	[0111.957] GetLastError () returned 0x26
	[0111.957] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0111.957] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.958] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0111.958] CancelIo (hFile=0x3c4) returned 1
	[0111.958] CloseHandle (hObject=0x3c4) returned 1
	[0111.960] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0111.960] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0111.960] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0111.960] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0111.960] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KffIUrJUk.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kffiurjuk.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KffIUrJUk.swf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kffiurjuk.swf.crypted")) returned 1
	[0111.961] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0111.962] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0111.962] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0111.993] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0111.993] CancelIo (hFile=0x3c0) returned 1
	[0111.993] CloseHandle (hObject=0x3c0) returned 1
	[0111.996] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0111.997] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.997] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0111.997] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0111.997] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qzfxLs8Rn9VY.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qzfxls8rn9vy.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qzfxLs8Rn9VY.docx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qzfxls8rn9vy.docx.crypted")) returned 1
	[0111.998] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0111.998] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0111.998] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0112.016] GetLastError () returned 0x26
	[0112.016] GetLastError () returned 0x26
	[0112.016] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0112.017] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.017] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0112.017] CancelIo (hFile=0x3c0) returned 1
	[0112.017] CloseHandle (hObject=0x3c0) returned 1
	[0112.020] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0112.020] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0112.020] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0112.021] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0112.021] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\NmUmUk6u7GgZXZ5BR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\nmumuk6u7ggzxz5br.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\NmUmUk6u7GgZXZ5BR.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\nmumuk6u7ggzxz5br.gif.crypted")) returned 1
	[0112.021] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0112.021] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0112.021] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.040] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=101707 | out: Addend=0xe0dacc) returned 10451951
	[0112.046] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x18d50, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.047] GetLastError () returned 0x3e5
	[0112.047] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0112.047] GetLastError () returned 0x26
	[0112.047] GetLastError () returned 0x26
	[0112.047] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0112.047] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.048] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0112.048] CancelIo (hFile=0x3c0) returned 1
	[0112.048] CloseHandle (hObject=0x3c0) returned 1
	[0112.069] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0112.069] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0112.069] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0112.070] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0112.070] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\oOyx5i.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\ooyx5i.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\oOyx5i.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\ooyx5i.mp3.crypted")) returned 1
	[0112.071] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0112.071] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0112.071] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.086] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=23914 | out: Addend=0xe0dacc) returned 10553658
	[0112.086] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x5d70, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.087] GetLastError () returned 0x3e5
	[0112.087] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0112.088] GetLastError () returned 0x26
	[0112.088] GetLastError () returned 0x26
	[0112.088] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0112.088] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.089] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0112.089] CancelIo (hFile=0x3c0) returned 1
	[0112.089] CloseHandle (hObject=0x3c0) returned 1
	[0112.104] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0112.105] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0112.105] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0112.105] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0112.105] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\Y6LkUcJgbr VRLA.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\y6lkucjgbr vrla.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\Y6LkUcJgbr VRLA.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\y6lkucjgbr vrla.wav.crypted")) returned 1
	[0112.106] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0112.106] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0112.106] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.122] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=17944 | out: Addend=0xe0dacc) returned 10577572
	[0112.122] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x4620, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.122] GetLastError () returned 0x3e5
	[0112.122] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0112.123] GetLastError () returned 0x26
	[0112.123] GetLastError () returned 0x26
	[0112.123] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0112.123] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.123] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0112.124] CancelIo (hFile=0x3c0) returned 1
	[0112.124] CloseHandle (hObject=0x3c0) returned 1
	[0112.127] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0112.127] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0112.127] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0112.128] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3510048
	[0112.128] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\yFncPMRrFQiCgwK VnlZ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\yfncpmrrfqicgwk vnlz.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\yFncPMRrFQiCgwK VnlZ.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\yfncpmrrfqicgwk vnlz.bmp.crypted")) returned 1
	[0112.128] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510048 | out: hHeap=0x5f0000) returned 1
	[0112.128] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0112.129] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.146] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=95654 | out: Addend=0xe0dacc) returned 10595516
	[0112.147] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x175b0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.148] GetLastError () returned 0x3e5
	[0112.148] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0112.148] GetLastError () returned 0x26
	[0112.148] GetLastError () returned 0x26
	[0112.148] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0112.148] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.149] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0112.149] CancelIo (hFile=0x3c0) returned 1
	[0112.149] CloseHandle (hObject=0x3c0) returned 1
	[0112.151] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0112.151] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0112.151] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0112.152] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0112.152] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\zsK7Tyj6OFZO2w.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\zsk7tyj6ofzo2w.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\zsK7Tyj6OFZO2w.jpg.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\zsk7tyj6ofzo2w.jpg.crypted")) returned 1
	[0112.153] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0112.153] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0112.153] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.181] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=80332 | out: Addend=0xe0dacc) returned 10691170
	[0112.182] WriteFile (in: hFile=0x3a8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x139d0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.183] GetLastError () returned 0x3e5
	[0112.183] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0112.183] GetLastError () returned 0x26
	[0112.183] GetLastError () returned 0x26
	[0112.183] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0112.183] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.184] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0112.184] CancelIo (hFile=0x3a8) returned 1
	[0112.184] CloseHandle (hObject=0x3a8) returned 1
	[0112.187] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0112.187] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0112.187] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0112.188] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0112.188] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rFlbShIKO6.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rflbshiko6.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rFlbShIKO6.xlsx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rflbshiko6.xlsx.crypted")) returned 1
	[0112.188] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0112.189] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0112.189] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.199] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 11263022
	[0112.205] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.206] GetLastError () returned 0x3e5
	[0112.206] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0112.221] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 11754542
	[0112.226] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.119] GetLastError () returned 0x3e5
	[0113.119] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.168] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8409680
	[0113.168] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.168] GetLastError () returned 0x3e5
	[0113.168] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.178] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8901200
	[0113.178] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.196] GetLastError () returned 0x3e5
	[0113.196] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.216] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9392720
	[0113.216] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.216] GetLastError () returned 0x3e5
	[0113.216] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.227] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9884240
	[0113.227] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.227] GetLastError () returned 0x3e5
	[0113.227] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.239] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10375760
	[0113.239] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.262] GetLastError () returned 0x3e5
	[0113.262] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.270] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10867280
	[0113.270] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.270] GetLastError () returned 0x3e5
	[0113.271] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.279] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 11358800
	[0113.279] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.290] GetLastError () returned 0x3e5
	[0113.290] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.299] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 11850320
	[0113.299] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.299] GetLastError () returned 0x3e5
	[0113.299] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.308] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 12341840
	[0113.308] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0113.319] GetLastError () returned 0x3e5
	[0113.319] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.487] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=1759 | out: Addend=0xe0dacc) returned 0
	[0113.487] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.488] GetLastError () returned 0x3e5
	[0113.488] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0113.488] GetLastError () returned 0x26
	[0113.488] GetLastError () returned 0x26
	[0113.488] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.488] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.489] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x632f78
	[0113.489] CancelIo (hFile=0x3c4) returned 1
	[0113.489] CloseHandle (hObject=0x3c4) returned 1
	[0113.504] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3521c18 | out: hHeap=0x5f0000) returned 1
	[0113.504] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0113.504] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0113.505] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0113.505] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UDWu JchmovkMW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\udwu jchmovkmw.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UDWu JchmovkMW.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\udwu jchmovkmw.mp3.crypted")) returned 1
	[0113.506] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0113.506] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x632f78 | out: hHeap=0x5f0000) returned 1
	[0113.506] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.525] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=82432 | out: Addend=0xe0dabc) returned 1760
	[0113.525] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0113.525] GetLastError () returned 0x3e5
	[0113.525] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.525] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0113.526] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3524cc0
	[0113.526] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3524cc0 | out: hHeap=0x5f0000) returned 1
	[0113.526] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=82432) returned 1
	[0113.526] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0113.526] GetLastError () returned 0x3e5
	[0113.526] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0113.526] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.663] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 575712
	[0113.663] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.692] GetLastError () returned 0x3e5
	[0113.692] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.703] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1067232
	[0113.703] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.703] GetLastError () returned 0x3e5
	[0113.703] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0113.714] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1558752
	[0113.714] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0114.223] GetLastError () returned 0x3e5
	[0114.223] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.231] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0114.231] GetLastError () returned 0x3e5
	[0114.232] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.235] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=71392 | out: Addend=0xe0dabc) returned 4560912
	[0114.235] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0114.235] GetLastError () returned 0x3e5
	[0114.235] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.235] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0114.235] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3524cc0
	[0114.235] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3524cc0 | out: hHeap=0x5f0000) returned 1
	[0114.235] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=71392) returned 1
	[0114.235] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0114.236] GetLastError () returned 0x3e5
	[0114.236] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0114.236] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.273] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=80784 | out: Addend=0xe0dabc) returned 4632304
	[0114.273] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0114.273] GetLastError () returned 0x3e5
	[0114.273] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.273] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0114.273] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3524cc0
	[0114.273] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3524cc0 | out: hHeap=0x5f0000) returned 1
	[0114.273] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=80784) returned 1
	[0114.273] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.274] GetLastError () returned 0x3e5
	[0114.274] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0114.274] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.296] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=36896 | out: Addend=0xe0dabc) returned 4713088
	[0114.296] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0114.296] GetLastError () returned 0x3e5
	[0114.296] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.296] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0114.296] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3524cc0
	[0114.297] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3524cc0 | out: hHeap=0x5f0000) returned 1
	[0114.297] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=36896) returned 1
	[0114.297] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.297] GetLastError () returned 0x3e5
	[0114.297] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0114.297] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.322] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=8000 | out: Addend=0xe0dabc) returned 4749984
	[0114.322] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0114.322] GetLastError () returned 0x3e5
	[0114.322] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.323] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0114.323] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0114.323] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0114.323] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=8000) returned 1
	[0114.323] WriteFile (in: hFile=0x3c8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.323] GetLastError () returned 0x3e5
	[0114.323] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0114.324] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.350] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=71776 | out: Addend=0xe0dabc) returned 4757984
	[0114.350] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0114.351] GetLastError () returned 0x3e5
	[0114.351] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.351] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0114.351] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0114.351] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0114.351] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=71776) returned 1
	[0114.351] WriteFile (in: hFile=0x3c8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.351] GetLastError () returned 0x3e5
	[0114.351] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0114.352] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.374] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=25552 | out: Addend=0xe0dabc) returned 4829760
	[0114.374] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0114.374] GetLastError () returned 0x3e5
	[0114.374] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.375] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0114.375] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0114.375] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0114.375] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=25552) returned 1
	[0114.375] WriteFile (in: hFile=0x3c8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.375] GetLastError () returned 0x3e5
	[0114.375] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0114.375] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.398] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=60096 | out: Addend=0xe0dabc) returned 4855312
	[0114.398] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0114.398] GetLastError () returned 0x3e5
	[0114.398] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.398] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0114.398] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0114.399] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0114.399] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=60096) returned 1
	[0114.399] WriteFile (in: hFile=0x3c8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.399] GetLastError () returned 0x3e5
	[0114.399] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0114.399] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.438] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5898308
	[0114.445] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.449] GetLastError () returned 0x3e5
	[0114.449] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0114.450] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6389828
	[0114.456] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0114.458] GetLastError () returned 0x3e5
	[0114.458] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.722] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=78753 | out: Addend=0xe0dacc) returned 983040
	[0115.723] WriteFile (in: hFile=0x3c4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x133b0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0115.723] GetLastError () returned 0x3e5
	[0115.723] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0115.724] GetLastError () returned 0x26
	[0115.724] GetLastError () returned 0x26
	[0115.724] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0115.724] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.725] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0115.725] CancelIo (hFile=0x3c4) returned 1
	[0115.725] CloseHandle (hObject=0x3c4) returned 1
	[0115.727] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.727] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0115.727] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0115.727] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0115.727] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NBaEY4w.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nbaey4w.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NBaEY4w.docx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nbaey4w.docx.crypted")) returned 1
	[0115.729] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0115.729] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0115.729] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.741] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0115.742] GetLastError () returned 0x3e5
	[0115.742] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.743] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=82848 | out: Addend=0xe0dabc) returned 1061808
	[0115.743] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0115.744] GetLastError () returned 0x3e5
	[0115.744] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.744] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.744] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4040048
	[0115.744] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040048 | out: hHeap=0x5f0000) returned 1
	[0115.744] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=82848) returned 1
	[0115.744] WriteFile (in: hFile=0x3c4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0115.745] GetLastError () returned 0x3e5
	[0115.745] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.745] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.762] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=50782 | out: Addend=0xe0dacc) returned 1144639
	[0115.763] WriteFile (in: hFile=0x3c4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0xc660, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0115.763] GetLastError () returned 0x3e5
	[0115.763] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0115.763] GetLastError () returned 0x26
	[0115.763] GetLastError () returned 0x26
	[0115.763] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0115.763] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0115.764] CancelIo (hFile=0x3c4) returned 1
	[0115.764] CloseHandle (hObject=0x3c4) returned 1
	[0115.765] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.766] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.766] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0115.766] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0115.766] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NtyXL63 JD.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ntyxl63 jd.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NtyXL63 JD.pptx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ntyxl63 jd.pptx.crypted")) returned 1
	[0115.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0115.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0115.767] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.781] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0115.784] GetLastError () returned 0x3e5
	[0115.784] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.789] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=271360 | out: Addend=0xe0dabc) returned 1195440
	[0115.789] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0115.789] GetLastError () returned 0x3e5
	[0115.789] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.789] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.789] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4040048
	[0115.789] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040048 | out: hHeap=0x5f0000) returned 1
	[0115.789] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=271360) returned 1
	[0115.789] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0115.789] GetLastError () returned 0x3e5
	[0115.789] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.789] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.807] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=29936 | out: Addend=0xe0dabc) returned 1466800
	[0115.807] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0115.807] GetLastError () returned 0x3e5
	[0115.807] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.807] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0115.808] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4040048
	[0115.808] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040048 | out: hHeap=0x5f0000) returned 1
	[0115.808] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=29936) returned 1
	[0115.808] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.808] GetLastError () returned 0x3e5
	[0115.808] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.808] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.817] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=93456 | out: Addend=0xe0dabc) returned 1496736
	[0115.817] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0115.817] GetLastError () returned 0x3e5
	[0115.817] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.817] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.817] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0115.818] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0115.818] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=93456) returned 1
	[0115.818] WriteFile (in: hFile=0x3c4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0115.818] GetLastError () returned 0x3e5
	[0115.818] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.818] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.836] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=91648 | out: Addend=0xe0dabc) returned 1590192
	[0115.836] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0115.836] GetLastError () returned 0x3e5
	[0115.837] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0115.837] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.837] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0115.837] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0115.837] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=91648) returned 1
	[0115.837] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.837] GetLastError () returned 0x3e5
	[0115.837] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.837] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.113] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=41869 | out: Addend=0xe0dacc) returned 2068815
	[0116.113] WriteFile (in: hFile=0x3f4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0xa390, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.114] GetLastError () returned 0x3e5
	[0116.114] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0116.114] GetLastError () returned 0x26
	[0116.114] GetLastError () returned 0x26
	[0116.114] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0116.114] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.115] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351da18
	[0116.115] CancelIo (hFile=0x3f4) returned 1
	[0116.115] CloseHandle (hObject=0x3f4) returned 1
	[0116.122] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d508 | out: hHeap=0x5f0000) returned 1
	[0116.122] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081dd8 | out: hHeap=0x5f0000) returned 1
	[0116.122] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0116.123] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x351db10
	[0116.123] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\AA7WI-0ERcyU\\HCTa6b8Pyb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\aa7wi-0ercyu\\hcta6b8pyb.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\AA7WI-0ERcyU\\HCTa6b8Pyb.docx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\aa7wi-0ercyu\\hcta6b8pyb.docx.crypted")) returned 1
	[0116.124] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351db10 | out: hHeap=0x5f0000) returned 1
	[0116.124] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351da18 | out: hHeap=0x5f0000) returned 1
	[0116.124] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.161] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=73307 | out: Addend=0xe0dacc) returned 2110684
	[0116.162] WriteFile (in: hFile=0x3dc, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x11e60, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.162] GetLastError () returned 0x3e5
	[0116.162] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0116.163] GetLastError () returned 0x26
	[0116.163] GetLastError () returned 0x26
	[0116.163] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.163] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.164] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0116.164] CancelIo (hFile=0x3dc) returned 1
	[0116.164] CloseHandle (hObject=0x3dc) returned 1
	[0116.166] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d508 | out: hHeap=0x5f0000) returned 1
	[0116.166] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ced8 | out: hHeap=0x5f0000) returned 1
	[0116.166] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0116.167] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x351ced8
	[0116.167] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\AA7WI-0ERcyU\\teMc0mMGPk.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\aa7wi-0ercyu\\temc0mmgpk.pdf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\AA7WI-0ERcyU\\teMc0mMGPk.pdf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\aa7wi-0ercyu\\temc0mmgpk.pdf.crypted")) returned 1
	[0116.168] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ced8 | out: hHeap=0x5f0000) returned 1
	[0116.168] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0116.168] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.188] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.189] GetLastError () returned 0x3e5
	[0116.189] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.190] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=65008 | out: Addend=0xe0dabc) returned 2184144
	[0116.190] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0116.191] GetLastError () returned 0x3e5
	[0116.191] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.191] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4045050
	[0116.191] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045460
	[0116.191] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045460 | out: hHeap=0x5f0000) returned 1
	[0116.191] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=65008) returned 1
	[0116.191] WriteFile (in: hFile=0x3ec, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.192] GetLastError () returned 0x3e5
	[0116.192] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0116.192] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.214] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=51643 | out: Addend=0xe0dacc) returned 2248996
	[0116.215] WriteFile (in: hFile=0x3ec, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0xc9c0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.215] GetLastError () returned 0x3e5
	[0116.216] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0116.216] GetLastError () returned 0x26
	[0116.216] GetLastError () returned 0x26
	[0116.216] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.216] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.217] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.217] CancelIo (hFile=0x3ec) returned 1
	[0116.217] CloseHandle (hObject=0x3ec) returned 1
	[0116.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d508 | out: hHeap=0x5f0000) returned 1
	[0116.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0116.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0116.219] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x351fff0
	[0116.219] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\YbCtz-.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\ybctz-.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\YbCtz-.xlsx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\ybctz-.xlsx.crypted")) returned 1
	[0116.220] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fff0 | out: hHeap=0x5f0000) returned 1
	[0116.220] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.220] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.240] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.240] GetLastError () returned 0x3e5
	[0116.240] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.242] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=65888 | out: Addend=0xe0dabc) returned 2300800
	[0116.242] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0116.242] GetLastError () returned 0x3e5
	[0116.242] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.242] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4042048
	[0116.242] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0116.242] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0116.242] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=65888) returned 1
	[0116.242] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.242] GetLastError () returned 0x3e5
	[0116.242] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4042048 | out: hHeap=0x5f0000) returned 1
	[0116.242] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0116.259] GetLastError () returned 0x26
	[0116.259] GetLastError () returned 0x26
	[0116.259] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.259] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.260] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x40819f8
	[0116.260] CancelIo (hFile=0x3e4) returned 1
	[0116.260] CloseHandle (hObject=0x3e4) returned 1
	[0116.261] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cff8 | out: hHeap=0x5f0000) returned 1
	[0116.261] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0116.261] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.262] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x351fec8
	[0116.262] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\9D-iv3fHhbTTfXhKSL-D.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\9d-iv3fhhbttfxhksl-d.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\9D-iv3fHhbTTfXhKSL-D.pptx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\9d-iv3fhhbttfxhksl-d.pptx.crypted")) returned 1
	[0116.262] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0116.262] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.263] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.422] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=65536 | out: Addend=0xe0dacc) returned 3038314
	[0116.422] WriteFile (in: hFile=0x3f4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.423] GetLastError () returned 0x3e5
	[0116.423] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0116.423] GetLastError () returned 0x26
	[0116.423] GetLastError () returned 0x26
	[0116.423] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0116.423] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.424] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x140) returned 0x3528a28
	[0116.424] CancelIo (hFile=0x3f4) returned 1
	[0116.424] CloseHandle (hObject=0x3f4) returned 1
	[0116.425] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047570 | out: hHeap=0x5f0000) returned 1
	[0116.425] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35288e0 | out: hHeap=0x5f0000) returned 1
	[0116.425] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0116.426] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x150) returned 0x672b98
	[0116.426] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\jjy1xiXyqPB.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\jjy1xixyqpb.pps"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\jjy1xiXyqPB.pps.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\jjy1xixyqpb.pps.crypted")) returned 1
	[0116.427] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672b98 | out: hHeap=0x5f0000) returned 1
	[0116.427] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3528a28 | out: hHeap=0x5f0000) returned 1
	[0116.427] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0116.445] GetLastError () returned 0x26
	[0116.446] GetLastError () returned 0x26
	[0116.446] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.446] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.447] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x140) returned 0x3528a28
	[0116.447] CancelIo (hFile=0x3dc) returned 1
	[0116.447] CloseHandle (hObject=0x3dc) returned 1
	[0116.448] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047060 | out: hHeap=0x5f0000) returned 1
	[0116.448] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3528cb8 | out: hHeap=0x5f0000) returned 1
	[0116.448] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.449] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x150) returned 0x672b98
	[0116.449] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\DSyrXWVCegiVWe.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\dsyrxwvcegivwe.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\DSyrXWVCegiVWe.docx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\dsyrxwvcegivwe.docx.crypted")) returned 1
	[0116.449] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672b98 | out: hHeap=0x5f0000) returned 1
	[0116.449] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3528a28 | out: hHeap=0x5f0000) returned 1
	[0116.450] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0116.463] GetLastError () returned 0x26
	[0116.463] GetLastError () returned 0x26
	[0116.463] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0116.463] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.464] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x140) returned 0x3528cb8
	[0116.464] CancelIo (hFile=0x3f4) returned 1
	[0116.464] CloseHandle (hObject=0x3f4) returned 1
	[0116.466] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047060 | out: hHeap=0x5f0000) returned 1
	[0116.466] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3528a28 | out: hHeap=0x5f0000) returned 1
	[0116.466] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0116.466] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x150) returned 0x672b98
	[0116.466] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\uEm-A36zUL.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\uem-a36zul.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\uEm-A36zUL.pptx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\uem-a36zul.pptx.crypted")) returned 1
	[0116.467] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672b98 | out: hHeap=0x5f0000) returned 1
	[0116.467] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3528cb8 | out: hHeap=0x5f0000) returned 1
	[0116.467] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.482] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=81312 | out: Addend=0xe0dacc) returned 3274973
	[0116.483] WriteFile (in: hFile=0x3e4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x13da0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.484] GetLastError () returned 0x3e5
	[0116.484] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0116.484] GetLastError () returned 0x26
	[0116.484] GetLastError () returned 0x26
	[0116.484] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.484] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.485] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x672dc8
	[0116.485] CancelIo (hFile=0x3e4) returned 1
	[0116.485] CloseHandle (hObject=0x3e4) returned 1
	[0116.486] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6728b8 | out: hHeap=0x5f0000) returned 1
	[0116.486] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0116.486] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.487] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x130) returned 0x672790
	[0116.487] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\52tO9Moo3wbA6XAz20.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\52to9moo3wba6xaz20.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\52tO9Moo3wbA6XAz20.pptx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\52to9moo3wba6xaz20.pptx.crypted")) returned 1
	[0116.488] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0116.488] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672dc8 | out: hHeap=0x5f0000) returned 1
	[0116.488] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.501] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=91040 | out: Addend=0xe0dacc) returned 3356285
	[0116.502] WriteFile (in: hFile=0x3e4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x163a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.503] GetLastError () returned 0x3e5
	[0116.503] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0116.603] GetLastError () returned 0x26
	[0116.603] GetLastError () returned 0x26
	[0116.603] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.608] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.616] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0116.617] GetLastError () returned 0x3e5
	[0116.617] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.619] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=60336 | out: Addend=0xe0dabc) returned 70016
	[0116.619] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0116.619] GetLastError () returned 0x3e5
	[0116.619] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.619] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0116.619] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0116.619] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0116.619] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=60336) returned 1
	[0116.619] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.620] GetLastError () returned 0x3e5
	[0116.620] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.620] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.641] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=27696 | out: Addend=0xe0dabc) returned 130352
	[0116.641] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.641] GetLastError () returned 0x3e5
	[0116.641] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.641] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0116.641] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0116.641] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0116.641] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=27696) returned 1
	[0116.641] WriteFile (in: hFile=0x3ec, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.642] GetLastError () returned 0x3e5
	[0116.642] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.642] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.663] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=60000 | out: Addend=0xe0dabc) returned 158048
	[0116.663] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.663] GetLastError () returned 0x3e5
	[0116.663] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.663] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0116.663] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0116.663] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0116.663] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=60000) returned 1
	[0116.664] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.664] GetLastError () returned 0x3e5
	[0116.664] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0116.664] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.685] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=41936 | out: Addend=0xe0dabc) returned 218048
	[0116.685] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.685] GetLastError () returned 0x3e5
	[0116.685] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.686] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0116.686] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0116.686] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0116.686] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=41936) returned 1
	[0116.686] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.686] GetLastError () returned 0x3e5
	[0116.686] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0116.686] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.715] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=87680 | out: Addend=0xe0dabc) returned 259984
	[0116.715] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.715] GetLastError () returned 0x3e5
	[0116.715] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.724] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 347664
	[0116.724] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.801] GetLastError () returned 0x3e5
	[0116.801] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.811] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 898272
	[0116.811] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.834] GetLastError () returned 0x3e5
	[0116.834] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.844] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1389792
	[0116.844] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.881] GetLastError () returned 0x3e5
	[0116.881] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.899] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1881552
	[0116.899] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.926] GetLastError () returned 0x3e5
	[0116.926] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.937] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2373072
	[0116.937] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.937] GetLastError () returned 0x3e5
	[0116.937] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.944] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2864592
	[0116.944] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.963] GetLastError () returned 0x3e5
	[0116.964] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.972] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3356112
	[0116.972] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.972] GetLastError () returned 0x3e5
	[0116.972] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0116.980] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3847632
	[0116.980] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0117.005] GetLastError () returned 0x3e5
	[0117.005] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.019] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=240 | out: Addend=0xe0dabc) returned 4339152
	[0117.020] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.020] GetLastError () returned 0x3e5
	[0117.020] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.020] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.020] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.020] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.020] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=240) returned 1
	[0117.020] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.021] GetLastError () returned 0x3e5
	[0117.021] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.021] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.090] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 4339392
	[0117.090] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0117.090] GetLastError () returned 0x3e5
	[0117.090] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.090] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0117.090] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.090] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.090] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=144) returned 1
	[0117.091] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0117.091] GetLastError () returned 0x3e5
	[0117.091] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0117.091] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.112] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 4339536
	[0117.112] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0117.112] GetLastError () returned 0x3e5
	[0117.112] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.112] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0117.112] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.112] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.112] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=144) returned 1
	[0117.113] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0117.113] GetLastError () returned 0x3e5
	[0117.113] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0117.113] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0117.131] GetLastError () returned 0x26
	[0117.131] GetLastError () returned 0x26
	[0117.131] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.131] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.133] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0117.133] CancelIo (hFile=0x3d8) returned 1
	[0117.133] CloseHandle (hObject=0x3d8) returned 1
	[0117.134] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.134] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0117.134] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.134] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0117.134] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url.crypted")) returned 1
	[0117.135] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0117.135] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0117.135] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.137] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 4339824
	[0117.137] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0117.137] GetLastError () returned 0x3e5
	[0117.137] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.137] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0117.137] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.137] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.137] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=144) returned 1
	[0117.137] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0117.138] GetLastError () returned 0x3e5
	[0117.138] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.138] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.160] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.160] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.160] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.160] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=144) returned 1
	[0117.160] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.160] GetLastError () returned 0x3e5
	[0117.160] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.160] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0117.648] GetLastError () returned 0x26
	[0117.648] GetLastError () returned 0x26
	[0117.648] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.648] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.649] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0117.649] CancelIo (hFile=0x3e0) returned 1
	[0117.649] CloseHandle (hObject=0x3e0) returned 1
	[0117.652] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d220 | out: hHeap=0x5f0000) returned 1
	[0117.652] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0117.652] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.653] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0117.653] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk.crypted")) returned 1
	[0117.654] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0117.654] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0117.654] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.699] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 493298
	[0117.705] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.709] GetLastError () returned 0x3e5
	[0117.709] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0117.879] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1375632
	[0117.886] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.053] GetLastError () returned 0x3e5
	[0118.053] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.073] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0118.074] GetLastError () returned 0x3e5
	[0118.074] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.074] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=5920 | out: Addend=0xe0dabc) returned 6290912
	[0118.074] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0118.074] GetLastError () returned 0x3e5
	[0118.074] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.075] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0118.075] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0118.075] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0118.075] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=5920) returned 1
	[0118.075] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0118.075] GetLastError () returned 0x3e5
	[0118.075] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0118.075] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.110] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0118.110] GetLastError () returned 0x3e5
	[0118.110] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.111] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=6816 | out: Addend=0xe0dabc) returned 6296832
	[0118.111] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0118.111] GetLastError () returned 0x3e5
	[0118.111] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.111] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0118.111] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0118.111] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0118.111] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=6816) returned 1
	[0118.112] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.112] GetLastError () returned 0x3e5
	[0118.112] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0118.112] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.138] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=26304 | out: Addend=0xe0dabc) returned 6303648
	[0118.138] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0118.138] GetLastError () returned 0x3e5
	[0118.138] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.139] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0118.139] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0118.139] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0118.139] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=26304) returned 1
	[0118.139] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.139] GetLastError () returned 0x3e5
	[0118.139] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0118.139] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.164] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=10944 | out: Addend=0xe0dabc) returned 6329952
	[0118.164] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0118.164] GetLastError () returned 0x3e5
	[0118.164] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.164] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0118.164] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0118.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0118.164] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=10944) returned 1
	[0118.164] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.165] GetLastError () returned 0x3e5
	[0118.165] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0118.165] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.190] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=33968 | out: Addend=0xe0dabc) returned 6340896
	[0118.190] ReadFile (in: hFile=0x3e4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0118.190] GetLastError () returned 0x3e5
	[0118.190] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.190] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0118.190] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0118.191] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0118.191] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=33968) returned 1
	[0118.191] WriteFile (in: hFile=0x3e4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.191] GetLastError () returned 0x3e5
	[0118.191] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0118.191] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.250] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6866384
	[0118.250] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.251] GetLastError () returned 0x3e5
	[0118.251] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.259] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7357904
	[0118.259] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.283] GetLastError () returned 0x3e5
	[0118.283] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.304] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7849424
	[0118.304] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.305] GetLastError () returned 0x3e5
	[0118.305] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.314] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8340944
	[0118.314] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.338] GetLastError () returned 0x3e5
	[0118.338] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.491] ReadFile (in: hFile=0x3f8, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0118.491] GetLastError () returned 0x3e5
	[0118.491] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.497] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=89583 | out: Addend=0xe0dacc) returned 8994951
	[0118.498] WriteFile (in: hFile=0x378, lpBuffer=0x4bb0054*, nNumberOfBytesToWrite=0x15df0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 1
	[0118.499] GetLastError () returned 0x3e5
	[0118.499] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.502] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=56528 | out: Addend=0xe0dabc) returned 9084672
	[0118.502] ReadFile (in: hFile=0x3c4, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0118.502] GetLastError () returned 0x3e5
	[0118.502] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.503] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0118.504] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4049050
	[0118.504] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4049050 | out: hHeap=0x5f0000) returned 1
	[0118.504] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=42800) returned 1
	[0118.504] WriteFile (in: hFile=0x3e4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.504] GetLastError () returned 0x3e5
	[0118.504] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0118.504] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0118.515] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043320
	[0118.515] CancelIo (hFile=0x3f4) returned 1
	[0118.515] CloseHandle (hObject=0x3f4) returned 1
	[0118.521] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047060 | out: hHeap=0x5f0000) returned 1
	[0118.521] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043068 | out: hHeap=0x5f0000) returned 1
	[0118.521] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0118.522] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0118.522] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\2VL5_3iPUx8mw.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\2vl5_3ipux8mw.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\2VL5_3iPUx8mw.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\2vl5_3ipux8mw.wav.crypted")) returned 1
	[0118.526] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0118.526] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043320 | out: hHeap=0x5f0000) returned 1
	[0118.526] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0120.348] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=21844 | out: Addend=0xe0dacc) returned 7012112
	[0120.349] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x5560, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.349] GetLastError () returned 0x3e5
	[0120.349] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0120.355] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=95360 | out: Addend=0xe0dabc) returned 7034032
	[0120.355] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0120.355] GetLastError () returned 0x3e5
	[0120.355] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0120.356] GetLastError () returned 0x26
	[0120.356] GetLastError () returned 0x26
	[0120.356] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0120.356] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0120.359] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4042558
	[0120.359] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.360] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.360] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=69840) returned 1
	[0120.360] WriteFile (in: hFile=0x37c, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0120.360] GetLastError () returned 0x3e5
	[0120.360] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4042558 | out: hHeap=0x5f0000) returned 1
	[0120.360] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0121.362] ReadFile (in: hFile=0x3c4, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 1
	[0121.362] GetLastError () returned 0x3e5
	[0121.362] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0121.368] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=67570 | out: Addend=0xe0dacc) returned 5299696
	[0121.369] WriteFile (in: hFile=0x378, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x10800, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0121.369] GetLastError () returned 0x3e5
	[0121.369] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0121.371] GetLastError () returned 0x26
	[0121.371] GetLastError () returned 0x26
	[0121.371] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0121.371] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0121.373] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x6726b8
	[0121.373] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0121.373] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0121.373] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=14352) returned 1
	[0121.373] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0121.373] GetLastError () returned 0x3e5
	[0121.374] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6726b8 | out: hHeap=0x5f0000) returned 1
	[0121.374] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0121.391] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0121.391] CancelIo (hFile=0x3ec) returned 1
	[0121.391] CloseHandle (hObject=0x3ec) returned 1
	[0121.392] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0121.392] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522e48 | out: hHeap=0x5f0000) returned 1
	[0121.392] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0121.393] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0121.393] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\PjRT4ImxVAs6z3Bij.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\pjrt4imxvas6z3bij.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\PjRT4ImxVAs6z3Bij.jpg.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\pjrt4imxvas6z3bij.jpg.crypted")) returned 1
	[0121.394] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0121.394] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0121.394] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0122.031] GetLastError () returned 0x26
	[0122.031] GetLastError () returned 0x26
	[0122.031] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0122.031] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.043] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0122.043] CancelIo (hFile=0x3f8) returned 1
	[0122.043] CloseHandle (hObject=0x3f8) returned 1
	[0122.047] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.047] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0122.047] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0122.048] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0122.048] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\uodH_fySlW2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\uodh_fyslw2.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\uodH_fySlW2.png.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\uodh_fyslw2.png.crypted")) returned 1
	[0122.050] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0122.050] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0122.050] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.067] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=248 | out: Addend=0xe0dacc) returned 3970560
	[0122.067] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.067] GetLastError () returned 0x3e5
	[0122.067] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0122.067] GetLastError () returned 0x26
	[0122.067] GetLastError () returned 0x26
	[0122.067] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0122.067] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.068] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0122.068] CancelIo (hFile=0x3dc) returned 1
	[0122.068] CloseHandle (hObject=0x3dc) returned 1
	[0122.071] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.071] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0122.071] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0122.072] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0122.072] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms.crypted")) returned 1
	[0122.073] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0122.073] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0122.073] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.100] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0122.100] GetLastError () returned 0x3e5
	[0122.100] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.101] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=39552 | out: Addend=0xe0dabc) returned 3970832
	[0122.102] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0122.102] GetLastError () returned 0x3e5
	[0122.102] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.102] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0122.102] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0122.102] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0122.102] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=39552) returned 1
	[0122.102] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.103] GetLastError () returned 0x3e5
	[0122.103] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0122.103] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.130] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=99185 | out: Addend=0xe0dacc) returned 4010359
	[0122.132] WriteFile (in: hFile=0x3f8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x18380, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.132] GetLastError () returned 0x3e5
	[0122.132] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0122.133] GetLastError () returned 0x26
	[0122.133] GetLastError () returned 0x26
	[0122.133] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0122.133] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.134] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0122.134] CancelIo (hFile=0x3f8) returned 1
	[0122.134] CloseHandle (hObject=0x3f8) returned 1
	[0122.136] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.136] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0122.136] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0122.136] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0122.137] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\3l-InIRqQiOsZWGu.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\3l-inirqqioszwgu.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\3l-InIRqQiOsZWGu.mkv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\3l-inirqqioszwgu.mkv.crypted")) returned 1
	[0122.137] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0122.138] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0122.138] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.178] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0122.179] GetLastError () returned 0x3e5
	[0122.179] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.181] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=98912 | out: Addend=0xe0dabc) returned 4109584
	[0122.181] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0122.181] GetLastError () returned 0x3e5
	[0122.181] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.182] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0122.182] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0122.182] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0122.182] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=98912) returned 1
	[0122.182] WriteFile (in: hFile=0x3f8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.182] GetLastError () returned 0x3e5
	[0122.182] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0122.182] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.210] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4208496
	[0122.210] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0122.668] GetLastError () returned 0x3e5
	[0122.668] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.715] ReadFile (in: hFile=0x37c, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0122.716] GetLastError () returned 0x3e5
	[0122.716] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.717] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=52688 | out: Addend=0xe0dabc) returned 10364608
	[0122.717] ReadFile (in: hFile=0x37c, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0122.717] GetLastError () returned 0x3e5
	[0122.717] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.718] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0122.718] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3519ac0
	[0122.718] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3519ac0 | out: hHeap=0x5f0000) returned 1
	[0122.718] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=52688) returned 1
	[0122.719] WriteFile (in: hFile=0x37c, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0122.719] GetLastError () returned 0x3e5
	[0122.719] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.719] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.753] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=29152 | out: Addend=0xe0dabc) returned 10417296
	[0122.753] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0122.753] GetLastError () returned 0x3e5
	[0122.753] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.753] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0122.753] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0122.753] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0122.754] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=29152) returned 1
	[0122.754] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.754] GetLastError () returned 0x3e5
	[0122.754] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0122.754] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.792] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=15376 | out: Addend=0xe0dabc) returned 10446448
	[0122.792] ReadFile (in: hFile=0x37c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0122.792] GetLastError () returned 0x3e5
	[0122.792] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.792] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0122.792] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3519ac0
	[0122.793] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3519ac0 | out: hHeap=0x5f0000) returned 1
	[0122.793] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=15376) returned 1
	[0122.793] WriteFile (in: hFile=0x37c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.793] GetLastError () returned 0x3e5
	[0122.793] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.793] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.815] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=17124 | out: Addend=0xe0dacc) returned 10461701
	[0122.815] WriteFile (in: hFile=0x3b8, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x42f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0122.816] GetLastError () returned 0x3e5
	[0122.816] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0122.817] GetLastError () returned 0x26
	[0122.817] GetLastError () returned 0x26
	[0122.817] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0122.817] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.818] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0122.818] CancelIo (hFile=0x3b8) returned 1
	[0122.818] CloseHandle (hObject=0x3b8) returned 1
	[0122.821] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.821] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0122.821] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0122.821] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0122.822] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\dB9YwY\\O6mLEbndz6QGzt-wts.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\db9ywy\\o6mlebndz6qgzt-wts.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\dB9YwY\\O6mLEbndz6QGzt-wts.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\db9ywy\\o6mlebndz6qgzt-wts.mp4.crypted")) returned 1
	[0122.824] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0122.824] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0122.824] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.848] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=50657 | out: Addend=0xe0dacc) returned 0
	[0122.849] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0xc5f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0122.849] GetLastError () returned 0x3e5
	[0122.849] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0122.850] GetLastError () returned 0x26
	[0122.850] GetLastError () returned 0x26
	[0122.850] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0122.850] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.850] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0122.850] CancelIo (hFile=0x3e0) returned 1
	[0122.851] CloseHandle (hObject=0x3e0) returned 1
	[0122.852] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.852] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0122.852] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0122.853] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0122.853] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\hb83Wc0b.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\hb83wc0b.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\hb83Wc0b.flv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\hb83wc0b.flv.crypted")) returned 1
	[0122.853] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0122.853] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0122.853] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.888] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1033697
	[0122.892] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.894] GetLastError () returned 0x3e5
	[0122.894] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.896] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1525217
	[0122.902] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.903] GetLastError () returned 0x3e5
	[0122.903] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.915] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2016737
	[0122.922] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.926] GetLastError () returned 0x3e5
	[0122.926] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0122.964] GetLastError () returned 0x26
	[0122.964] GetLastError () returned 0x26
	[0122.964] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0122.964] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.965] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0122.965] CancelIo (hFile=0x3e0) returned 1
	[0122.965] CloseHandle (hObject=0x3e0) returned 1
	[0122.967] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.967] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0122.967] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0122.968] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0122.968] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\ifQGThn.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\ifqgthn.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\ifQGThn.avi.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\ifqgthn.avi.crypted")) returned 1
	[0122.969] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0122.969] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0122.969] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.986] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=59441 | out: Addend=0xe0dacc) returned 2555414
	[0122.987] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xe840, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.988] GetLastError () returned 0x3e5
	[0122.988] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0122.988] GetLastError () returned 0x26
	[0122.988] GetLastError () returned 0x26
	[0122.988] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0122.988] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0122.989] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0122.989] CancelIo (hFile=0x3e0) returned 1
	[0122.989] CloseHandle (hObject=0x3e0) returned 1
	[0122.991] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.991] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0122.991] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0122.992] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0122.992] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\N03oAf2CJF4H5ES.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\n03oaf2cjf4h5es.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\N03oAf2CJF4H5ES.avi.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\n03oaf2cjf4h5es.avi.crypted")) returned 1
	[0122.993] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0122.993] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0122.993] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.010] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=41185 | out: Addend=0xe0dacc) returned 2614855
	[0123.011] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xa0f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.011] GetLastError () returned 0x3e5
	[0123.011] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0123.011] GetLastError () returned 0x26
	[0123.011] GetLastError () returned 0x26
	[0123.011] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.011] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.012] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0123.012] CancelIo (hFile=0x3e0) returned 1
	[0123.012] CloseHandle (hObject=0x3e0) returned 1
	[0123.015] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.015] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.015] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.016] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0123.016] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\RDXmfRE-VouSP6.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\rdxmfre-vousp6.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\RDXmfRE-VouSP6.avi.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\rdxmfre-vousp6.avi.crypted")) returned 1
	[0123.017] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0123.017] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0123.017] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.037] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=97635 | out: Addend=0xe0dacc) returned 2656040
	[0123.038] WriteFile (in: hFile=0x3b8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x17d70, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.039] GetLastError () returned 0x3e5
	[0123.039] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0123.039] GetLastError () returned 0x26
	[0123.039] GetLastError () returned 0x26
	[0123.039] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.039] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.040] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0123.040] CancelIo (hFile=0x3b8) returned 1
	[0123.040] CloseHandle (hObject=0x3b8) returned 1
	[0123.042] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0123.042] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0123.042] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.043] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043150
	[0123.043] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\3j6lnWD2iiLSh5P8Qus.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\3j6lnwd2iilsh5p8qus.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\3j6lnWD2iiLSh5P8Qus.swf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\3j6lnwd2iilsh5p8qus.swf.crypted")) returned 1
	[0123.044] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043150 | out: hHeap=0x5f0000) returned 1
	[0123.045] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0123.045] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.063] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=71664 | out: Addend=0xe0dacc) returned 2753675
	[0123.064] WriteFile (in: hFile=0x3b8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x117f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.064] GetLastError () returned 0x3e5
	[0123.064] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0123.065] GetLastError () returned 0x26
	[0123.065] GetLastError () returned 0x26
	[0123.065] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.065] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.066] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0123.066] CancelIo (hFile=0x3b8) returned 1
	[0123.066] CloseHandle (hObject=0x3b8) returned 1
	[0123.067] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0123.067] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0123.068] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.068] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0123.068] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\gIwtU-.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\giwtu-.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\gIwtU-.mkv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\giwtu-.mkv.crypted")) returned 1
	[0123.069] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0123.069] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0123.069] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.087] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=89459 | out: Addend=0xe0dacc) returned 2825339
	[0123.089] WriteFile (in: hFile=0x3b8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x15d80, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.089] GetLastError () returned 0x3e5
	[0123.089] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0123.090] GetLastError () returned 0x26
	[0123.090] GetLastError () returned 0x26
	[0123.090] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.090] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.091] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0123.091] CancelIo (hFile=0x3b8) returned 1
	[0123.091] CloseHandle (hObject=0x3b8) returned 1
	[0123.097] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0123.097] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0123.097] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.098] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0123.098] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\HIPSXeLnDr.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\hipsxelndr.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\HIPSXeLnDr.avi.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\hipsxelndr.avi.crypted")) returned 1
	[0123.099] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0123.099] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0123.099] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.117] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=74752 | out: Addend=0xe0dacc) returned 2914798
	[0123.118] WriteFile (in: hFile=0x3b8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x12400, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.118] GetLastError () returned 0x3e5
	[0123.118] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0123.119] GetLastError () returned 0x26
	[0123.119] GetLastError () returned 0x26
	[0123.119] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.119] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.120] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0123.120] CancelIo (hFile=0x3b8) returned 1
	[0123.120] CloseHandle (hObject=0x3b8) returned 1
	[0123.122] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0123.122] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0123.122] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.123] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0123.123] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\HYXKIjIn.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\hyxkijin.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\HYXKIjIn.swf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\hyxkijin.swf.crypted")) returned 1
	[0123.124] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0123.124] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0123.124] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.142] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=89331 | out: Addend=0xe0dacc) returned 2989550
	[0123.143] WriteFile (in: hFile=0x3b8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x15d00, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.144] GetLastError () returned 0x3e5
	[0123.144] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0123.144] GetLastError () returned 0x26
	[0123.144] GetLastError () returned 0x26
	[0123.144] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.144] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.145] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0123.145] CancelIo (hFile=0x3b8) returned 1
	[0123.145] CloseHandle (hObject=0x3b8) returned 1
	[0123.148] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0123.148] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0123.148] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.148] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043150
	[0123.148] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\JdLIRi8CM81z7CZXMLmh.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\jdliri8cm81z7czxmlmh.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\JdLIRi8CM81z7CZXMLmh.mkv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\jdliri8cm81z7czxmlmh.mkv.crypted")) returned 1
	[0123.149] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043150 | out: hHeap=0x5f0000) returned 1
	[0123.150] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0123.150] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.170] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=83065 | out: Addend=0xe0dacc) returned 3078881
	[0123.172] WriteFile (in: hFile=0x3b8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x14480, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.172] GetLastError () returned 0x3e5
	[0123.172] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0123.173] GetLastError () returned 0x26
	[0123.173] GetLastError () returned 0x26
	[0123.173] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.173] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.174] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0123.174] CancelIo (hFile=0x3b8) returned 1
	[0123.174] CloseHandle (hObject=0x3b8) returned 1
	[0123.176] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0123.176] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0123.176] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.177] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0123.177] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\P9C_r9pxhuf-A.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\p9c_r9pxhuf-a.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\P9C_r9pxhuf-A.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\p9c_r9pxhuf-a.mp4.crypted")) returned 1
	[0123.318] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0123.318] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0123.318] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0123.320] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=14864 | out: Addend=0xe0dabc) returned 3426288
	[0123.320] ReadFile (in: hFile=0x378, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 0x0
	[0123.320] GetLastError () returned 0x3e5
	[0123.320] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0128.333] GetLastError () returned 0x102
	[0128.333] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0128.398] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=181714 | out: Addend=0xe0dacc) returned 3440640
	[0128.401] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x2c5e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0128.402] GetLastError () returned 0x3e5
	[0128.402] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0128.769] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7554514
	[0128.776] WriteFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 0x0
	[0128.778] GetLastError () returned 0x3e5
	[0128.778] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0128.833] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=58609 | out: Addend=0xe0dacc) returned 8537554
	[0128.834] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToWrite=0xe500, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0128.839] GetLastError () returned 0x3e5
	[0128.839] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0128.987] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0128.994] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0128.999] GetLastError () returned 0x3e5
	[0128.999] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0129.402] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3096203
	[0129.406] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0129.408] GetLastError () returned 0x3e5
	[0129.408] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0129.408] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3096224
	[0129.408] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0129.473] GetLastError () returned 0x3e5
	[0129.473] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0129.480] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=286320 | out: Addend=0xe0dabc) returned 4368576
	[0129.480] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0129.480] GetLastError () returned 0x3e5
	[0129.480] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0129.493] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4654869
	[0129.497] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0129.498] GetLastError () returned 0x3e5
	[0129.498] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0129.498] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4654896
	[0129.498] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0129.500] GetLastError () returned 0x3e5
	[0129.500] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0129.506] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5146416
	[0129.506] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0129.539] GetLastError () returned 0x3e5
	[0129.540] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0129.543] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0129.543] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x66b168
	[0129.543] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x66b168 | out: hHeap=0x5f0000) returned 1
	[0129.543] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x25bf5d0 | out: lpFileSize=0x25bf5d0*=620896) returned 1
	[0129.544] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0129.544] GetLastError () returned 0x3e5
	[0129.544] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0129.544] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 0
	[0134.825] GetLastError () returned 0x102
	[0134.825] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0134.945] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8224768
	[0134.972] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.974] GetLastError () returned 0x3e5
	[0134.974] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c) returned 1
	[0134.976] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8716288
	[0134.981] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.983] GetLastError () returned 0x3e5
	[0134.983] GetQueuedCompletionStatus (CompletionPort=0xc8, lpNumberOfBytesTransferred=0x25bf548, lpCompletionKey=0x25bf5dc, lpOverlapped=0x25bf53c, dwMilliseconds=0x1388) 

Thread:
	id = 5
	os_tid = 0x2a8

	[0057.806] GetCurrentThreadId () returned 0x2a8
	[0057.806] GetCurrentThreadId () returned 0x2a8
	[0057.806] GetLastError () returned 0x57
	[0057.806] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x364) returned 0x611cf8
	[0057.806] SetLastError (dwErrCode=0x57) 
	[0057.806] GetLastError () returned 0x57
	[0057.807] SetLastError (dwErrCode=0x57) 
	[0057.807] WriteFile (in: hFile=0x7, lpBuffer=0x287dd08*, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0x287dd00, lpOverlapped=0x0 | out: lpBuffer=0x287dd08*, lpNumberOfBytesWritten=0x287dd00*=0x47, lpOverlapped=0x0) returned 1
	[0057.808] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0074.932] GetLastError () returned 0x102
	[0074.932] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0080.304] GetLastError () returned 0x102
	[0080.304] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0085.657] GetLastError () returned 0x102
	[0085.657] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0090.795] GetLastError () returned 0x102
	[0090.795] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0095.812] GetLastError () returned 0x102
	[0095.813] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0101.121] GetLastError () returned 0x102
	[0101.121] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0110.395] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=1177 | out: Addend=0xe0dacc) returned 2035640
	[0110.395] WriteFile (in: hFile=0x3c4, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0110.395] GetLastError () returned 0x3e5
	[0110.395] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0110.395] GetLastError () returned 0x26
	[0110.395] GetLastError () returned 0x26
	[0110.395] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4ab0020) returned 1
	[0110.396] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0110.396] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0110.396] CancelIo (hFile=0x3c4) returned 1
	[0110.396] CloseHandle (hObject=0x3c4) returned 1
	[0110.398] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfe8 | out: hHeap=0x5f0000) returned 1
	[0110.398] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0110.398] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4ab0020 | out: hHeap=0x5f0000) returned 1
	[0110.398] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0110.398] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.crypted")) returned 1
	[0110.399] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0110.399] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0110.399] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0110.419] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2036817
	[0110.429] WriteFile (in: hFile=0x3a8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0110.431] GetLastError () returned 0x3e5
	[0110.431] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0110.452] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2528337
	[0110.459] WriteFile (in: hFile=0x3a8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0110.461] GetLastError () returned 0x3e5
	[0110.461] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0110.462] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3019857
	[0110.469] WriteFile (in: hFile=0x3a8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0110.470] GetLastError () returned 0x3e5
	[0110.470] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0110.483] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=221184 | out: Addend=0xe0dacc) returned 3511377
	[0110.486] WriteFile (in: hFile=0x3a8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x36000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0110.488] GetLastError () returned 0x3e5
	[0110.488] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0110.488] GetLastError () returned 0x26
	[0110.488] GetLastError () returned 0x26
	[0110.488] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0110.488] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0110.489] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0110.489] CancelIo (hFile=0x3a8) returned 1
	[0110.489] CloseHandle (hObject=0x3a8) returned 1
	[0111.138] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081a80 | out: hHeap=0x5f0000) returned 1
	[0111.138] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x632f78 | out: hHeap=0x5f0000) returned 1
	[0111.138] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0111.139] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0111.139] MoveFileW (lpExistingFileName="C:\\\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), lpNewFileName="C:\\\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi.crypted" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi.crypted")) returned 1
	[0111.141] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0111.141] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0111.141] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0111.149] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8441344
	[0111.149] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0111.245] GetLastError () returned 0x3e5
	[0111.245] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0111.617] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=35114 | out: Addend=0xe0dacc) returned 4882996
	[0111.617] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToWrite=0x8930, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 0
	[0111.622] GetLastError () returned 0x3e5
	[0111.622] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0111.675] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0111.680] GetLastError () returned 0x3e5
	[0111.680] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0111.695] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0111.710] GetLastError () returned 0x3e5
	[0111.710] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0111.726] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0111.726] GetLastError () returned 0x3e5
	[0111.726] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0111.743] ReadFile (in: hFile=0x3c8, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0
	[0111.754] GetLastError () returned 0x3e5
	[0111.754] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0111.766] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5369504
	[0111.766] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0111.956] GetLastError () returned 0x3e5
	[0111.956] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0111.957] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351dff0
	[0111.957] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351e400
	[0111.957] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351e400 | out: hHeap=0x5f0000) returned 1
	[0111.958] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=87280) returned 1
	[0111.958] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0111.962] GetLastError () returned 0x3e5
	[0111.962] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0111.962] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0111.992] GetLastError () returned 0x26
	[0111.992] GetLastError () returned 0x26
	[0111.992] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.998] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0112.015] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=41714 | out: Addend=0xe0dacc) returned 10410237
	[0112.016] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToWrite=0xa300, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0112.022] GetLastError () returned 0x3e5
	[0112.022] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0112.039] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0112.071] GetLastError () returned 0x3e5
	[0112.071] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0112.086] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0112.106] GetLastError () returned 0x3e5
	[0112.106] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0112.121] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0112.129] GetLastError () returned 0x3e5
	[0112.129] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0112.145] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0112.153] GetLastError () returned 0x3e5
	[0112.153] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0112.180] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0112.189] GetLastError () returned 0x3e5
	[0112.189] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0112.199] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 11263184
	[0112.199] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0112.229] GetLastError () returned 0x3e5
	[0112.229] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0112.340] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0112.348] GetLastError () returned 0x3e5
	[0112.348] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0112.561] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 53840
	[0112.561] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.944] GetLastError () returned 0x3e5
	[0112.944] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0113.169] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8409661
	[0113.176] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0113.319] GetLastError () returned 0x3e5
	[0113.320] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0113.523] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=82418 | out: Addend=0xe0dacc) returned 1759
	[0113.524] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x14200, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0113.531] GetLastError () returned 0x3e5
	[0113.531] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0113.654] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 84192
	[0113.654] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0113.725] GetLastError () returned 0x3e5
	[0113.725] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0113.731] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=20909 | out: Addend=0xe0dacc) returned 2050257
	[0113.731] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToWrite=0x51b0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 0
	[0113.740] GetLastError () returned 0x3e5
	[0113.740] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0113.759] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0113.766] GetLastError () returned 0x3e5
	[0113.766] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0113.891] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0113.899] GetLastError () returned 0x3e5
	[0113.899] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0114.084] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.094] GetLastError () returned 0x3e5
	[0114.095] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0114.141] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2594739
	[0114.149] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0114.223] GetLastError () returned 0x3e5
	[0114.223] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0114.232] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=71387 | out: Addend=0xe0dacc) returned 5052339
	[0114.234] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToWrite=0x116e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 0
	[0114.241] GetLastError () returned 0x3e5
	[0114.241] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0114.269] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.278] GetLastError () returned 0x3e5
	[0114.278] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0114.294] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.301] GetLastError () returned 0x3e5
	[0114.301] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0114.321] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.330] GetLastError () returned 0x3e5
	[0114.330] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0114.347] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.356] GetLastError () returned 0x3e5
	[0114.356] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0114.373] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.379] GetLastError () returned 0x3e5
	[0114.379] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0114.396] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.403] GetLastError () returned 0x3e5
	[0114.403] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0114.409] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5406788
	[0114.416] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0114.460] GetLastError () returned 0x3e5
	[0114.460] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0114.960] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0114.960] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0115.609] GetLastError () returned 0x3e5
	[0115.609] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0115.705] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.810] GetLastError () returned 0x3e5
	[0115.810] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0115.815] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0115.821] GetLastError () returned 0x3e5
	[0115.821] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0115.834] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.843] GetLastError () returned 0x3e5
	[0115.843] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0115.856] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.862] GetLastError () returned 0x3e5
	[0115.862] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0115.885] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.890] GetLastError () returned 0x3e5
	[0115.890] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0115.903] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.908] GetLastError () returned 0x3e5
	[0115.908] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0115.922] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.927] GetLastError () returned 0x3e5
	[0115.927] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0115.940] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.951] GetLastError () returned 0x3e5
	[0115.951] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0115.964] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.968] GetLastError () returned 0x3e5
	[0115.968] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0115.981] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.989] GetLastError () returned 0x3e5
	[0115.989] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.004] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.008] GetLastError () returned 0x3e5
	[0116.008] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.022] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0116.042] GetLastError () returned 0x3e5
	[0116.042] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.058] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0116.061] GetLastError () returned 0x3e5
	[0116.061] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.066] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=13008 | out: Addend=0xe0dabc) returned 2055952
	[0116.066] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0116.068] GetLastError () returned 0x3e5
	[0116.068] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.125] ReadFile (in: hFile=0x3e4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.125] GetLastError () returned 0x3e5
	[0116.125] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.263] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0116.263] GetLastError () returned 0x3e5
	[0116.263] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.265] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=59104 | out: Addend=0xe0dabc) returned 2382816
	[0116.265] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0116.265] GetLastError () returned 0x3e5
	[0116.265] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.265] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfd0
	[0116.265] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0116.265] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0116.265] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=59104) returned 1
	[0116.265] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.265] GetLastError () returned 0x3e5
	[0116.265] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfd0 | out: hHeap=0x5f0000) returned 1
	[0116.265] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.276] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=4647 | out: Addend=0xe0dacc) returned 2441739
	[0116.276] WriteFile (in: hFile=0x3ec, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x1230, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.276] GetLastError () returned 0x3e5
	[0116.276] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0116.277] GetLastError () returned 0x26
	[0116.277] GetLastError () returned 0x26
	[0116.277] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.277] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.278] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0116.278] CancelIo (hFile=0x3ec) returned 1
	[0116.278] CloseHandle (hObject=0x3ec) returned 1
	[0116.279] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0116.279] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.279] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0116.280] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043068
	[0116.280] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\4Vpbqavm_yuJ jhRY.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\4vpbqavm_yuj jhry.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\4Vpbqavm_yuJ jhRY.pptx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\4vpbqavm_yuj jhry.pptx.crypted")) returned 1
	[0116.281] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043068 | out: hHeap=0x5f0000) returned 1
	[0116.281] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0116.281] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.298] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0116.298] GetLastError () returned 0x3e5
	[0116.298] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.299] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=18656 | out: Addend=0xe0dabc) returned 2446576
	[0116.299] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.300] GetLastError () returned 0x3e5
	[0116.300] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.300] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0116.300] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0116.300] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0116.300] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=18656) returned 1
	[0116.300] WriteFile (in: hFile=0x3ec, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.300] GetLastError () returned 0x3e5
	[0116.301] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.301] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.353] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=36469 | out: Addend=0xe0dacc) returned 2956559
	[0116.354] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x8e80, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.354] GetLastError () returned 0x3e5
	[0116.354] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0116.355] GetLastError () returned 0x26
	[0116.355] GetLastError () returned 0x26
	[0116.355] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.355] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.356] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351ffc0
	[0116.356] CancelIo (hFile=0x38c) returned 1
	[0116.356] CloseHandle (hObject=0x38c) returned 1
	[0116.358] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0116.358] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0116.358] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.359] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x4081c98
	[0116.359] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\2-LkXdR3QAQc.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\2-lkxdr3qaqc.ods"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\2-LkXdR3QAQc.ods.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\2-lkxdr3qaqc.ods.crypted")) returned 1
	[0116.360] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081c98 | out: hHeap=0x5f0000) returned 1
	[0116.360] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffc0 | out: hHeap=0x5f0000) returned 1
	[0116.360] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.381] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0116.382] GetLastError () returned 0x3e5
	[0116.382] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.384] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=45296 | out: Addend=0xe0dabc) returned 2993232
	[0116.384] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.384] GetLastError () returned 0x3e5
	[0116.384] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.385] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4047570
	[0116.385] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x404a058
	[0116.385] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x404a058 | out: hHeap=0x5f0000) returned 1
	[0116.385] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=45296) returned 1
	[0116.385] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.385] GetLastError () returned 0x3e5
	[0116.385] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047570 | out: hHeap=0x5f0000) returned 1
	[0116.385] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.444] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=73401 | out: Addend=0xe0dacc) returned 3103850
	[0116.445] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x11ec0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0116.450] GetLastError () returned 0x3e5
	[0116.450] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.460] ReadFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0116.461] GetLastError () returned 0x3e5
	[0116.461] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.463] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=97728 | out: Addend=0xe0dabc) returned 3177472
	[0116.463] ReadFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0116.463] GetLastError () returned 0x3e5
	[0116.463] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.463] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4047570
	[0116.463] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x404a058
	[0116.463] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x404a058 | out: hHeap=0x5f0000) returned 1
	[0116.463] GetFileSizeEx (in: hFile=0x3f4, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=97728) returned 1
	[0116.463] WriteFile (in: hFile=0x3f4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.464] GetLastError () returned 0x3e5
	[0116.464] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047570 | out: hHeap=0x5f0000) returned 1
	[0116.464] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.484] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=81312 | out: Addend=0xe0dabc) returned 3275200
	[0116.484] ReadFile (in: hFile=0x3e4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.484] GetLastError () returned 0x3e5
	[0116.484] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.484] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4047060
	[0116.484] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4049050
	[0116.484] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4049050 | out: hHeap=0x5f0000) returned 1
	[0116.484] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=81312) returned 1
	[0116.484] WriteFile (in: hFile=0x3e4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.485] GetLastError () returned 0x3e5
	[0116.485] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047060 | out: hHeap=0x5f0000) returned 1
	[0116.485] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.503] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=91040 | out: Addend=0xe0dabc) returned 3356512
	[0116.503] ReadFile (in: hFile=0x3e4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.503] GetLastError () returned 0x3e5
	[0116.503] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.517] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=98760 | out: Addend=0xe0dacc) returned 3447325
	[0116.518] WriteFile (in: hFile=0x3f4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x181d0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.519] GetLastError () returned 0x3e5
	[0116.519] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0116.519] GetLastError () returned 0x26
	[0116.519] GetLastError () returned 0x26
	[0116.519] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0116.519] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.520] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x4047570
	[0116.520] CancelIo (hFile=0x3f4) returned 1
	[0116.520] CloseHandle (hObject=0x3f4) returned 1
	[0116.522] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047060 | out: hHeap=0x5f0000) returned 1
	[0116.522] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081c98 | out: hHeap=0x5f0000) returned 1
	[0116.522] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0116.522] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x130) returned 0x4081c98
	[0116.522] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\_xH9hpBu68q0fhrFug.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\_xh9hpbu68q0fhrfug.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\_xH9hpBu68q0fhrFug.pptx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\_xh9hpbu68q0fhrfug.pptx.crypted")) returned 1
	[0116.523] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081c98 | out: hHeap=0x5f0000) returned 1
	[0116.523] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047570 | out: hHeap=0x5f0000) returned 1
	[0116.523] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.538] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=20061 | out: Addend=0xe0dacc) returned 3546085
	[0116.539] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x4e60, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.539] GetLastError () returned 0x3e5
	[0116.539] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0116.539] GetLastError () returned 0x26
	[0116.540] GetLastError () returned 0x26
	[0116.540] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0116.540] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.540] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043150
	[0116.540] CancelIo (hFile=0x38c) returned 1
	[0116.540] CloseHandle (hObject=0x38c) returned 1
	[0116.542] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.542] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043068 | out: hHeap=0x5f0000) returned 1
	[0116.542] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0116.543] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x40819f8
	[0116.543] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\7imCwB.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\7imcwb.rtf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\7imCwB.rtf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\7imcwb.rtf.crypted")) returned 1
	[0116.543] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.543] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043150 | out: hHeap=0x5f0000) returned 1
	[0116.543] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.559] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=97743 | out: Addend=0xe0dacc) returned 3566146
	[0116.561] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x17dd0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.562] GetLastError () returned 0x3e5
	[0116.562] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0116.562] GetLastError () returned 0x26
	[0116.562] GetLastError () returned 0x26
	[0116.562] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0116.562] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.563] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0116.563] CancelIo (hFile=0x38c) returned 1
	[0116.563] CloseHandle (hObject=0x38c) returned 1
	[0116.565] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.565] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.565] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0116.566] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x351ffc0
	[0116.566] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\daVeaa8IXqC.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\daveaa8ixqc.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\daVeaa8IXqC.docx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\daveaa8ixqc.docx.crypted")) returned 1
	[0116.566] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffc0 | out: hHeap=0x5f0000) returned 1
	[0116.567] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0116.567] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.582] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=70015 | out: Addend=0xe0dacc) returned 0
	[0116.583] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x11180, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.583] GetLastError () returned 0x3e5
	[0116.583] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0116.584] GetLastError () returned 0x26
	[0116.584] GetLastError () returned 0x26
	[0116.584] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0116.584] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.584] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043068
	[0116.584] CancelIo (hFile=0x38c) returned 1
	[0116.584] CloseHandle (hObject=0x38c) returned 1
	[0116.591] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.591] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043150 | out: hHeap=0x5f0000) returned 1
	[0116.591] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0116.591] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x40819f8
	[0116.592] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\feY4.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\fey4.ppt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\feY4.ppt.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\fey4.ppt.crypted")) returned 1
	[0116.592] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.592] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043068 | out: hHeap=0x5f0000) returned 1
	[0116.592] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.604] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x40819f8
	[0116.604] CancelIo (hFile=0x3e4) returned 1
	[0116.604] CloseHandle (hObject=0x3e4) returned 1
	[0116.606] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6728b8 | out: hHeap=0x5f0000) returned 1
	[0116.606] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0116.606] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.607] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x130) returned 0x351fec8
	[0116.607] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\DNsA6SztWUR9G8.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\dnsa6sztwur9g8.ods"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\DNsA6SztWUR9G8.ods.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\dnsa6sztwur9g8.ods.crypted")) returned 1
	[0116.607] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0116.608] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.608] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0116.619] GetLastError () returned 0x26
	[0116.619] GetLastError () returned 0x26
	[0116.619] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0116.619] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.620] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x672ca0
	[0116.620] CancelIo (hFile=0x38c) returned 1
	[0116.620] CloseHandle (hObject=0x38c) returned 1
	[0116.622] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0116.622] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.622] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0116.622] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x40819f8
	[0116.622] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\wba4TGDIU14_.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\wba4tgdiu14_.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\wba4TGDIU14_.ots.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\wba4tgdiu14_.ots.crypted")) returned 1
	[0116.623] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.623] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672ca0 | out: hHeap=0x5f0000) returned 1
	[0116.623] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.640] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=27685 | out: Addend=0xe0dacc) returned 130338
	[0116.640] WriteFile (in: hFile=0x3ec, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x6c30, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.641] GetLastError () returned 0x3e5
	[0116.641] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0116.641] GetLastError () returned 0x26
	[0116.641] GetLastError () returned 0x26
	[0116.641] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.641] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.642] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0116.642] CancelIo (hFile=0x3ec) returned 1
	[0116.642] CloseHandle (hObject=0x3ec) returned 1
	[0116.643] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0116.643] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0116.643] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.644] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0116.644] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\YrzxumZnNrT_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\yrzxumznnrt_.doc"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\YrzxumZnNrT_.doc.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\yrzxumznnrt_.doc.crypted")) returned 1
	[0116.645] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0116.645] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0116.645] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.662] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=59991 | out: Addend=0xe0dacc) returned 158023
	[0116.662] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xea60, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.663] GetLastError () returned 0x3e5
	[0116.663] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0116.663] GetLastError () returned 0x26
	[0116.663] GetLastError () returned 0x26
	[0116.663] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.663] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.664] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0116.664] CancelIo (hFile=0x3d8) returned 1
	[0116.664] CloseHandle (hObject=0x3d8) returned 1
	[0116.666] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.666] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0116.666] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.667] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0116.667] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\_cIQ9GOKM2uAOWto.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\_ciq9gokm2uaowto.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\_cIQ9GOKM2uAOWto.xlsx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\_ciq9gokm2uaowto.xlsx.crypted")) returned 1
	[0116.667] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0116.667] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0116.667] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.684] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=41925 | out: Addend=0xe0dacc) returned 218014
	[0116.685] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xa3d0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.685] GetLastError () returned 0x3e5
	[0116.685] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0116.685] GetLastError () returned 0x26
	[0116.685] GetLastError () returned 0x26
	[0116.685] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.686] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.686] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0116.686] CancelIo (hFile=0x3c4) returned 1
	[0116.686] CloseHandle (hObject=0x3c4) returned 1
	[0116.688] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.688] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0116.688] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.688] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0116.688] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XjMrrETi4IkvROeU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xjmrreti4ikvroeu.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XjMrrETi4IkvROeU.pptx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xjmrreti4ikvroeu.pptx.crypted")) returned 1
	[0116.689] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0116.690] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0116.690] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.704] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=87672 | out: Addend=0xe0dacc) returned 259939
	[0116.714] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x15680, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.715] GetLastError () returned 0x3e5
	[0116.715] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.716] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 347611
	[0116.722] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.723] GetLastError () returned 0x3e5
	[0116.724] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.725] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0116.725] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0116.725] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0116.725] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=87680) returned 1
	[0116.725] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.725] GetLastError () returned 0x3e5
	[0116.725] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0116.725] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.744] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=37728 | out: Addend=0xe0dabc) returned 839184
	[0116.744] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.744] GetLastError () returned 0x3e5
	[0116.744] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.744] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0116.744] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0116.744] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0116.744] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=37728) returned 1
	[0116.744] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.744] GetLastError () returned 0x3e5
	[0116.744] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0116.744] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.761] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=21360 | out: Addend=0xe0dabc) returned 876912
	[0116.761] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.761] GetLastError () returned 0x3e5
	[0116.761] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0116.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0116.762] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0116.762] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=21360) returned 1
	[0116.762] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.762] GetLastError () returned 0x3e5
	[0116.762] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0116.762] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0116.853] GetLastError () returned 0x26
	[0116.853] GetLastError () returned 0x26
	[0116.853] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.853] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.854] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0116.854] CancelIo (hFile=0x3d8) returned 1
	[0116.855] CloseHandle (hObject=0x3d8) returned 1
	[0116.856] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.856] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0116.856] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.857] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0116.857] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url.crypted")) returned 1
	[0116.858] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0116.858] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0116.858] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.927] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2372999
	[0116.933] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.937] GetLastError () returned 0x3e5
	[0116.937] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.938] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2864519
	[0116.942] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.943] GetLastError () returned 0x3e5
	[0116.943] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.964] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3356039
	[0116.969] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.972] GetLastError () returned 0x3e5
	[0116.972] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0116.972] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3847559
	[0116.978] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0116.980] GetLastError () returned 0x3e5
	[0116.980] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.277] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4340503
	[0117.281] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.327] GetLastError () returned 0x3e5
	[0117.327] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.328] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 6306583
	[0117.328] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.328] GetLastError () returned 0x3e5
	[0117.328] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0117.329] GetLastError () returned 0x26
	[0117.329] GetLastError () returned 0x26
	[0117.329] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.329] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.330] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.330] CancelIo (hFile=0x3e0) returned 1
	[0117.330] CloseHandle (hObject=0x3e0) returned 1
	[0117.332] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.332] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0117.332] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.333] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0117.333] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url.crypted")) returned 1
	[0117.334] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0117.334] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.334] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.342] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6306912
	[0117.342] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.355] GetLastError () returned 0x3e5
	[0117.355] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.373] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6798432
	[0117.373] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.374] GetLastError () returned 0x3e5
	[0117.374] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.383] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7289952
	[0117.383] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.405] GetLastError () returned 0x3e5
	[0117.405] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.412] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7781472
	[0117.412] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.412] GetLastError () returned 0x3e5
	[0117.412] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.418] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8272992
	[0117.418] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.437] GetLastError () returned 0x3e5
	[0117.437] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.444] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8764512
	[0117.444] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.444] GetLastError () returned 0x3e5
	[0117.444] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.450] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9256032
	[0117.450] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.475] GetLastError () returned 0x3e5
	[0117.475] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.486] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9747552
	[0117.486] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.486] GetLastError () returned 0x3e5
	[0117.486] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.496] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10239072
	[0117.496] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.519] GetLastError () returned 0x3e5
	[0117.519] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.539] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 11221916
	[0117.539] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.539] GetLastError () returned 0x3e5
	[0117.539] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0117.551] GetLastError () returned 0x26
	[0117.551] GetLastError () returned 0x26
	[0117.551] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.551] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.552] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0117.552] CancelIo (hFile=0x3e0) returned 1
	[0117.552] CloseHandle (hObject=0x3e0) returned 1
	[0117.561] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.561] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0117.561] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.562] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0117.562] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url.crypted")) returned 1
	[0117.563] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0117.563] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0117.563] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.599] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=496 | out: Addend=0xe0dabc) returned 0
	[0117.599] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.599] GetLastError () returned 0x3e5
	[0117.599] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.599] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0117.599] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.600] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.600] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=496) returned 1
	[0117.600] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.601] GetLastError () returned 0x3e5
	[0117.601] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0117.601] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0117.607] GetLastError () returned 0x26
	[0117.607] GetLastError () returned 0x26
	[0117.607] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0117.607] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.608] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0117.608] CancelIo (hFile=0x3c4) returned 1
	[0117.608] CloseHandle (hObject=0x3c4) returned 1
	[0117.612] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.612] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0117.612] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0117.613] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.613] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk.crypted")) returned 1
	[0117.710] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.711] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0117.711] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.717] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0117.717] GetLastError () returned 0x3e5
	[0117.718] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.720] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=75008 | out: Addend=0xe0dabc) returned 1476368
	[0117.720] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0117.720] GetLastError () returned 0x3e5
	[0117.720] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.720] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.721] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.721] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.721] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=75008) returned 1
	[0117.721] WriteFile (in: hFile=0x3ec, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0117.721] GetLastError () returned 0x3e5
	[0117.721] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.721] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.742] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=32936 | out: Addend=0xe0dacc) returned 1059819
	[0117.743] WriteFile (in: hFile=0x3ec, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x80b0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.743] GetLastError () returned 0x3e5
	[0117.743] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0117.743] GetLastError () returned 0x26
	[0117.743] GetLastError () returned 0x26
	[0117.743] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.743] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.744] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0117.744] CancelIo (hFile=0x3ec) returned 1
	[0117.744] CloseHandle (hObject=0x3ec) returned 1
	[0117.747] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.747] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0117.747] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.748] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0117.748] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5k272oFhyqM0yt7I\\IltPMZE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5k272ofhyqm0yt7i\\iltpmze.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5k272oFhyqM0yt7I\\IltPMZE.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5k272ofhyqm0yt7i\\iltpmze.mp3.crypted")) returned 1
	[0117.748] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0117.748] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0117.748] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.762] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.763] GetLastError () returned 0x3e5
	[0117.763] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.765] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=67792 | out: Addend=0xe0dabc) returned 1584320
	[0117.765] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.765] GetLastError () returned 0x3e5
	[0117.765] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.765] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.765] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.765] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.766] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=67792) returned 1
	[0117.766] WriteFile (in: hFile=0x3ec, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.766] GetLastError () returned 0x3e5
	[0117.766] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.766] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.785] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=89180 | out: Addend=0xe0dacc) returned 1160546
	[0117.786] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x15c60, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.786] GetLastError () returned 0x3e5
	[0117.786] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0117.786] GetLastError () returned 0x26
	[0117.787] GetLastError () returned 0x26
	[0117.787] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.787] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.788] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0117.788] CancelIo (hFile=0x3d8) returned 1
	[0117.788] CloseHandle (hObject=0x3d8) returned 1
	[0117.792] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.792] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0117.793] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.793] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.793] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8a8QTID8m0a.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8a8qtid8m0a.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8a8QTID8m0a.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8a8qtid8m0a.mp3.crypted")) returned 1
	[0117.794] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.794] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0117.794] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.810] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.811] GetLastError () returned 0x3e5
	[0117.811] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.812] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=27632 | out: Addend=0xe0dabc) returned 1741296
	[0117.812] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.812] GetLastError () returned 0x3e5
	[0117.812] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.812] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.812] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.812] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.812] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=27632) returned 1
	[0117.812] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.813] GetLastError () returned 0x3e5
	[0117.813] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.813] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.834] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=50481 | out: Addend=0xe0dacc) returned 1277358
	[0117.834] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xc540, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.835] GetLastError () returned 0x3e5
	[0117.835] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0117.835] GetLastError () returned 0x26
	[0117.835] GetLastError () returned 0x26
	[0117.835] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.835] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.836] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0117.836] CancelIo (hFile=0x3d8) returned 1
	[0117.836] CloseHandle (hObject=0x3d8) returned 1
	[0117.838] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.838] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0117.838] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.839] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0117.839] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\IXq9U17GbHn-s4w_7.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ixq9u17gbhn-s4w_7.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\IXq9U17GbHn-s4w_7.m4a.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ixq9u17gbhn-s4w_7.m4a.crypted")) returned 1
	[0117.839] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0117.839] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0117.840] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.859] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.859] GetLastError () returned 0x3e5
	[0117.859] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.861] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=47808 | out: Addend=0xe0dabc) returned 1819424
	[0117.861] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.861] GetLastError () returned 0x3e5
	[0117.861] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.861] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.861] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.861] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.861] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=47808) returned 1
	[0117.861] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.862] GetLastError () returned 0x3e5
	[0117.862] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.862] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.913] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1867152
	[0117.919] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.923] GetLastError () returned 0x3e5
	[0117.923] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.923] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2358672
	[0117.930] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.932] GetLastError () returned 0x3e5
	[0117.932] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.932] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2850192
	[0117.938] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.940] GetLastError () returned 0x3e5
	[0117.940] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.963] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3341712
	[0117.967] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.969] GetLastError () returned 0x3e5
	[0117.969] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0117.969] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3833232
	[0117.976] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0117.977] GetLastError () returned 0x3e5
	[0117.978] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0118.000] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4324752
	[0118.007] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.010] GetLastError () returned 0x3e5
	[0118.010] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0118.010] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4816272
	[0118.016] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.018] GetLastError () returned 0x3e5
	[0118.018] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0118.038] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5307792
	[0118.042] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.045] GetLastError () returned 0x3e5
	[0118.045] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0118.046] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5799312
	[0118.215] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0118.350] GetLastError () returned 0x3e5
	[0118.350] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0118.490] ReadFile (in: hFile=0x3f4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0118.490] GetLastError () returned 0x3e5
	[0118.491] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0118.496] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=51777 | out: Addend=0xe0dacc) returned 8943174
	[0118.497] WriteFile (in: hFile=0x3f8, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0xca50, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0118.497] GetLastError () returned 0x3e5
	[0118.497] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0118.501] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=89584 | out: Addend=0xe0dabc) returned 8995088
	[0118.501] ReadFile (in: hFile=0x378, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 0x0
	[0118.502] GetLastError () returned 0x3e5
	[0118.502] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0118.503] GetLastError () returned 0x26
	[0118.503] GetLastError () returned 0x26
	[0118.503] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4cb0020) returned 1
	[0118.503] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0118.509] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x4049068
	[0118.509] CancelIo (hFile=0x3e4) returned 1
	[0118.509] CloseHandle (hObject=0x3e4) returned 1
	[0118.513] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0118.513] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0118.513] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0118.513] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043320
	[0118.514] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\iEyXzDZJ8s LPAJN.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\ieyxzdzj8s lpajn.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\iEyXzDZJ8s LPAJN.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\ieyxzdzj8s lpajn.mp3.crypted")) returned 1
	[0118.515] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043320 | out: hHeap=0x5f0000) returned 1
	[0118.515] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4049068 | out: hHeap=0x5f0000) returned 1
	[0118.515] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.363] ReadFile (in: hFile=0x378, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0121.363] GetLastError () returned 0x3e5
	[0121.363] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.369] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=58528 | out: Addend=0xe0dabc) returned 5579840
	[0121.369] ReadFile (in: hFile=0x37c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0121.370] GetLastError () returned 0x3e5
	[0121.370] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0121.371] GetLastError () returned 0x26
	[0121.371] GetLastError () returned 0x26
	[0121.371] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0121.371] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.374] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x6726b8
	[0121.374] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0121.374] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0121.374] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=38512) returned 1
	[0121.374] WriteFile (in: hFile=0x3ec, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0121.374] GetLastError () returned 0x3e5
	[0121.374] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6726b8 | out: hHeap=0x5f0000) returned 1
	[0121.374] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.394] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0121.394] CancelIo (hFile=0x3e0) returned 1
	[0121.394] CloseHandle (hObject=0x3e0) returned 1
	[0121.396] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0121.396] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0121.396] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4ab0020 | out: hHeap=0x5f0000) returned 1
	[0121.397] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0121.397] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\VerXtgx0Jo40vFcmY02.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\verxtgx0jo40vfcmy02.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\VerXtgx0Jo40vFcmY02.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\verxtgx0jo40vfcmy02.bmp.crypted")) returned 1
	[0121.398] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0121.398] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0121.398] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.705] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=92020 | out: Addend=0xe0dacc) returned 10394608
	[0121.706] WriteFile (in: hFile=0x3dc, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x16780, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0121.706] GetLastError () returned 0x3e5
	[0121.706] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0121.707] GetLastError () returned 0x26
	[0121.707] GetLastError () returned 0x26
	[0121.707] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0121.707] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.707] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.707] CancelIo (hFile=0x3dc) returned 1
	[0121.707] CloseHandle (hObject=0x3dc) returned 1
	[0121.709] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0121.709] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0121.709] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0121.710] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0121.710] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\WrYL.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\wryl.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\WrYL.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\wryl.gif.crypted")) returned 1
	[0121.711] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0121.711] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.711] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.728] ReadFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0121.728] GetLastError () returned 0x3e5
	[0121.728] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.730] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=89360 | out: Addend=0xe0dabc) returned 10978240
	[0121.730] ReadFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0121.730] GetLastError () returned 0x3e5
	[0121.730] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.730] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0121.730] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0121.730] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0121.730] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=89360) returned 1
	[0121.730] WriteFile (in: hFile=0x3d8, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0121.731] GetLastError () returned 0x3e5
	[0121.731] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0121.731] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.748] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=7818 | out: Addend=0xe0dacc) returned 10575982
	[0121.748] WriteFile (in: hFile=0x3d8, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x1e90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0121.749] GetLastError () returned 0x3e5
	[0121.749] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0121.749] GetLastError () returned 0x26
	[0121.749] GetLastError () returned 0x26
	[0121.749] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0121.749] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.751] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0121.751] CancelIo (hFile=0x3d8) returned 1
	[0121.751] CloseHandle (hObject=0x3d8) returned 1
	[0121.755] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0121.755] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0121.755] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0121.755] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.755] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_Xsp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_xsp.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_Xsp.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_xsp.gif.crypted")) returned 1
	[0121.756] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.756] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0121.756] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.822] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0121.822] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.824] GetLastError () returned 0x3e5
	[0121.824] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.833] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0121.833] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.835] GetLastError () returned 0x3e5
	[0121.835] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.845] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0121.845] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.868] GetLastError () returned 0x3e5
	[0121.868] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.877] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474560
	[0121.877] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.899] GetLastError () returned 0x3e5
	[0121.899] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.908] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1966080
	[0121.909] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.965] GetLastError () returned 0x3e5
	[0121.965] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.976] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2457600
	[0121.976] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.977] GetLastError () returned 0x3e5
	[0121.977] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0121.985] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2949120
	[0121.985] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.997] GetLastError () returned 0x3e5
	[0121.997] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.008] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3440640
	[0122.008] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0122.234] GetLastError () returned 0x3e5
	[0122.235] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.403] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0122.412] GetLastError () returned 0x3e5
	[0122.412] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.414] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=50235 | out: Addend=0xe0dacc) returned 4907567
	[0122.414] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0xc440, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0122.415] GetLastError () returned 0x3e5
	[0122.415] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0122.415] GetLastError () returned 0x26
	[0122.415] GetLastError () returned 0x26
	[0122.415] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0122.415] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.416] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0122.416] CancelIo (hFile=0x3c4) returned 1
	[0122.416] CloseHandle (hObject=0x3c4) returned 1
	[0122.418] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0122.418] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0122.418] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0122.418] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0122.419] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\QcUdBWF5bkWxAByPbG.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\qcudbwf5bkwxabypbg.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\QcUdBWF5bkWxAByPbG.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\qcudbwf5bkwxabypbg.mp4.crypted")) returned 1
	[0122.420] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0122.420] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0122.420] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.437] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4957802
	[0122.444] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.447] GetLastError () returned 0x3e5
	[0122.447] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.449] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5449322
	[0122.458] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.459] GetLastError () returned 0x3e5
	[0122.460] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.486] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5940842
	[0122.490] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.492] GetLastError () returned 0x3e5
	[0122.492] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.494] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6432362
	[0122.498] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.500] GetLastError () returned 0x3e5
	[0122.500] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.516] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6923882
	[0122.520] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.530] GetLastError () returned 0x3e5
	[0122.530] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.530] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7415402
	[0122.535] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.536] GetLastError () returned 0x3e5
	[0122.536] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.560] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7906922
	[0122.565] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.569] GetLastError () returned 0x3e5
	[0122.569] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.570] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8398442
	[0122.575] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.576] GetLastError () returned 0x3e5
	[0122.577] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.607] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8889962
	[0122.614] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.618] GetLastError () returned 0x3e5
	[0122.618] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.624] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9381482
	[0122.632] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.634] GetLastError () returned 0x3e5
	[0122.634] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.639] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9873002
	[0122.643] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.645] GetLastError () returned 0x3e5
	[0122.645] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.859] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 50657
	[0122.865] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0122.928] GetLastError () returned 0x3e5
	[0122.928] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.962] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0122.962] GetLastError () returned 0x3e5
	[0122.962] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.963] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=47168 | out: Addend=0xe0dabc) returned 2508272
	[0122.963] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0122.964] GetLastError () returned 0x3e5
	[0122.964] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.964] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0122.964] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0122.964] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0122.964] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=47168) returned 1
	[0122.964] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0122.964] GetLastError () returned 0x3e5
	[0122.964] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0122.965] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.988] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=59456 | out: Addend=0xe0dabc) returned 2555440
	[0122.988] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0122.988] GetLastError () returned 0x3e5
	[0122.988] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0122.988] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0122.988] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0122.989] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0122.989] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=59456) returned 1
	[0122.989] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.989] GetLastError () returned 0x3e5
	[0122.989] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0122.989] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.011] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=41200 | out: Addend=0xe0dabc) returned 2614896
	[0123.011] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.011] GetLastError () returned 0x3e5
	[0123.011] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.011] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0123.012] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0123.012] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0123.012] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=41200) returned 1
	[0123.012] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.012] GetLastError () returned 0x3e5
	[0123.012] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0123.012] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.039] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=97648 | out: Addend=0xe0dabc) returned 2656096
	[0123.039] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.039] GetLastError () returned 0x3e5
	[0123.039] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.039] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0123.039] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3519ac0
	[0123.040] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3519ac0 | out: hHeap=0x5f0000) returned 1
	[0123.040] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=97648) returned 1
	[0123.040] WriteFile (in: hFile=0x3b8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.040] GetLastError () returned 0x3e5
	[0123.040] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.040] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.064] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=71664 | out: Addend=0xe0dabc) returned 2753744
	[0123.064] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.065] GetLastError () returned 0x3e5
	[0123.065] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.065] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0123.065] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3519ac0
	[0123.065] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3519ac0 | out: hHeap=0x5f0000) returned 1
	[0123.065] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=71664) returned 1
	[0123.065] WriteFile (in: hFile=0x3b8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.065] GetLastError () returned 0x3e5
	[0123.065] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.066] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.089] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=89472 | out: Addend=0xe0dabc) returned 2825408
	[0123.089] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.089] GetLastError () returned 0x3e5
	[0123.089] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.090] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0123.090] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3519ac0
	[0123.090] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3519ac0 | out: hHeap=0x5f0000) returned 1
	[0123.090] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=89472) returned 1
	[0123.090] WriteFile (in: hFile=0x3b8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.091] GetLastError () returned 0x3e5
	[0123.091] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.091] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.118] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=74752 | out: Addend=0xe0dabc) returned 2914880
	[0123.118] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.119] GetLastError () returned 0x3e5
	[0123.119] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.119] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0123.119] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3519ac0
	[0123.119] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3519ac0 | out: hHeap=0x5f0000) returned 1
	[0123.119] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=74752) returned 1
	[0123.119] WriteFile (in: hFile=0x3b8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.120] GetLastError () returned 0x3e5
	[0123.120] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.120] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.144] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=89344 | out: Addend=0xe0dabc) returned 2989632
	[0123.144] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.144] GetLastError () returned 0x3e5
	[0123.144] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.144] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0123.145] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3519ac0
	[0123.145] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3519ac0 | out: hHeap=0x5f0000) returned 1
	[0123.145] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=89344) returned 1
	[0123.145] WriteFile (in: hFile=0x3b8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.145] GetLastError () returned 0x3e5
	[0123.145] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.145] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.173] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=83072 | out: Addend=0xe0dabc) returned 3078976
	[0123.173] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.173] GetLastError () returned 0x3e5
	[0123.173] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.173] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0123.173] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3519ac0
	[0123.173] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3519ac0 | out: hHeap=0x5f0000) returned 1
	[0123.173] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=83072) returned 1
	[0123.174] WriteFile (in: hFile=0x3b8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.174] GetLastError () returned 0x3e5
	[0123.174] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.174] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.216] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=64883 | out: Addend=0xe0dacc) returned 3161946
	[0123.217] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xfd80, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.301] GetLastError () returned 0x3e5
	[0123.301] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.301] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=64896 | out: Addend=0xe0dabc) returned 3162048
	[0123.301] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.301] GetLastError () returned 0x3e5
	[0123.301] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0123.301] GetLastError () returned 0x26
	[0123.301] GetLastError () returned 0x26
	[0123.301] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.301] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.302] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351b4e8
	[0123.302] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0123.302] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0123.302] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=64896) returned 1
	[0123.302] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.303] GetLastError () returned 0x3e5
	[0123.303] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351b4e8 | out: hHeap=0x5f0000) returned 1
	[0123.303] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0123.303] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040380
	[0123.303] CancelIo (hFile=0x3c4) returned 1
	[0123.303] CloseHandle (hObject=0x3c4) returned 1
	[0123.319] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.319] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0123.319] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.319] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0123.319] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\WJkXfc0y.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\wjkxfc0y.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\WJkXfc0y.avi.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\wjkxfc0y.avi.crypted")) returned 1
	[0123.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0123.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040380 | out: hHeap=0x5f0000) returned 1
	[0123.324] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0127.321] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7372800
	[0127.328] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.330] GetLastError () returned 0x3e5
	[0127.330] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0127.360] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7864320
	[0127.367] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.370] GetLastError () returned 0x3e5
	[0127.370] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0127.372] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8355840
	[0127.378] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.380] GetLastError () returned 0x3e5
	[0127.380] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0127.409] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8847360
	[0127.416] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.419] GetLastError () returned 0x3e5
	[0127.419] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0127.421] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9338880
	[0127.428] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.430] GetLastError () returned 0x3e5
	[0127.430] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0127.456] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9830400
	[0127.464] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0127.468] GetLastError () returned 0x3e5
	[0127.468] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0128.835] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=58624 | out: Addend=0xe0dabc) returned 8537568
	[0128.835] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0128.835] GetLastError () returned 0x3e5
	[0128.835] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 0
	[0128.835] GetLastError () returned 0x26
	[0128.835] GetLastError () returned 0x26
	[0128.835] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0128.835] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0128.835] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x671c98
	[0128.836] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0128.836] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0128.836] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=8414464) returned 1
	[0128.836] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0128.836] GetLastError () returned 0x3e5
	[0128.836] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671c98 | out: hHeap=0x5f0000) returned 1
	[0128.836] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0128.836] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0128.836] CancelIo (hFile=0x3dc) returned 1
	[0128.836] CloseHandle (hObject=0x3dc) returned 1
	[0128.837] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0128.837] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0128.837] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0128.838] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0128.838] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), lpNewFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.crypted" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3.crypted")) returned 1
	[0128.839] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0128.839] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0128.839] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0128.997] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0128.997] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0129.310] GetLastError () returned 0x3e5
	[0129.310] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0129.315] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2113163
	[0129.322] WriteFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 0x0
	[0129.324] GetLastError () returned 0x3e5
	[0129.324] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0129.349] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2113184
	[0129.349] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0129.442] GetLastError () returned 0x3e5
	[0129.443] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0129.474] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=286315 | out: Addend=0xe0dacc) returned 4368554
	[0129.479] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x45e70, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0x0
	[0129.480] GetLastError () returned 0x3e5
	[0129.480] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0129.500] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5146389
	[0129.504] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0129.506] GetLastError () returned 0x3e5
	[0129.506] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0129.522] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5767277
	[0129.526] WriteFile (in: hFile=0x3ec, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0129.527] GetLastError () returned 0x3e5
	[0129.527] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0129.556] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0129.556] CancelIo (hFile=0x3e0) returned 1
	[0129.556] CloseHandle (hObject=0x3e0) returned 1
	[0129.557] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0129.557] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0129.557] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0129.557] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0129.557] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.crypted" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.crypted")) returned 1
	[0129.558] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0129.558] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0129.558] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0129.569] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6750352
	[0129.569] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0129.769] GetLastError () returned 0x3e5
	[0129.769] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0129.781] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7837168
	[0129.781] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0129.970] GetLastError () returned 0x3e5
	[0129.970] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0129.980] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0129.980] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0129.982] GetLastError () returned 0x3e5
	[0129.982] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0129.990] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0129.990] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0130.338] GetLastError () returned 0x3e5
	[0130.338] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0130.377] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3440640
	[0130.397] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0130.458] GetLastError () returned 0x3e5
	[0130.458] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0130.480] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3932160
	[0130.488] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0130.493] GetLastError () returned 0x3e5
	[0130.493] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0130.495] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4423680
	[0130.502] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0130.504] GetLastError () returned 0x3e5
	[0130.504] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0130.508] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4915200
	[0130.515] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0130.536] GetLastError () returned 0x3e5
	[0130.536] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0130.648] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5406720
	[0130.654] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0130.657] GetLastError () returned 0x3e5
	[0130.657] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.405] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8355840
	[0133.411] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.413] GetLastError () returned 0x3e5
	[0133.413] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.435] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8847360
	[0133.441] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.445] GetLastError () returned 0x3e5
	[0133.445] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.447] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9338880
	[0133.453] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.454] GetLastError () returned 0x3e5
	[0133.454] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.467] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9830400
	[0133.473] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.475] GetLastError () returned 0x3e5
	[0133.475] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.501] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9830400
	[0133.501] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.502] GetLastError () returned 0x3e5
	[0133.502] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.510] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10321920
	[0133.510] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.533] GetLastError () returned 0x3e5
	[0133.533] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.542] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10813440
	[0133.542] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.544] GetLastError () returned 0x3e5
	[0133.544] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.551] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 11304960
	[0133.551] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.574] GetLastError () returned 0x3e5
	[0133.574] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.583] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 11796480
	[0133.583] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.584] GetLastError () returned 0x3e5
	[0133.584] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.750] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 15728640
	[0133.750] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.855] GetLastError () returned 0x3e5
	[0133.855] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.857] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 19169280
	[0133.864] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.865] GetLastError () returned 0x3e5
	[0133.865] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.884] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 19660800
	[0133.890] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0133.893] GetLastError () returned 0x3e5
	[0133.893] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.922] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 19169280
	[0133.922] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.948] GetLastError () returned 0x3e5
	[0133.948] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.978] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 19660800
	[0133.978] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.979] GetLastError () returned 0x3e5
	[0133.979] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0133.988] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 20152320
	[0133.988] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.014] GetLastError () returned 0x3e5
	[0134.014] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0134.024] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 20643840
	[0134.024] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.026] GetLastError () returned 0x3e5
	[0134.026] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0134.036] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 21135360
	[0134.036] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.070] GetLastError () returned 0x3e5
	[0134.071] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0134.254] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2818048
	[0134.254] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0134.370] GetLastError () returned 0x3e5
	[0134.370] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0134.371] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5275648
	[0134.376] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.380] GetLastError () returned 0x3e5
	[0134.380] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0134.382] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5767168
	[0134.388] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.390] GetLastError () returned 0x3e5
	[0134.390] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0134.392] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6258688
	[0134.399] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.401] GetLastError () returned 0x3e5
	[0134.401] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0134.429] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6750208
	[0134.435] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.438] GetLastError () returned 0x3e5
	[0134.438] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0134.440] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7241728
	[0134.446] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.448] GetLastError () returned 0x3e5
	[0134.448] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0134.472] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7733248
	[0134.478] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0134.481] GetLastError () returned 0x3e5
	[0134.481] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0134.983] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9207808
	[0134.983] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.005] GetLastError () returned 0x3e5
	[0135.005] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0135.013] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9699328
	[0135.013] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.015] GetLastError () returned 0x3e5
	[0135.015] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0135.026] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10190848
	[0135.026] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.069] GetLastError () returned 0x3e5
	[0135.069] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0135.185] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474560
	[0135.185] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.276] GetLastError () returned 0x3e5
	[0135.276] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0135.284] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3440640
	[0135.284] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0135.299] GetLastError () returned 0x3e5
	[0135.299] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0135.308] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3932160
	[0135.308] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0135.309] GetLastError () returned 0x3e5
	[0135.309] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0135.312] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=131104 | out: Addend=0xe0dabc) returned 4423680
	[0135.312] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0135.312] GetLastError () returned 0x3e5
	[0135.312] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c) returned 1
	[0135.313] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0135.313] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x66b168
	[0135.313] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x66b168 | out: hHeap=0x5f0000) returned 1
	[0135.313] GetFileSizeEx (in: hFile=0x3ac, lpFileSize=0x287f7e0 | out: lpFileSize=0x287f7e0*=169213984) returned 1
	[0135.313] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0135.314] GetLastError () returned 0x3e5
	[0135.314] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0135.314] GetQueuedCompletionStatus (CompletionPort=0xc8, lpNumberOfBytesTransferred=0x287f758, lpCompletionKey=0x287f7ec, lpOverlapped=0x287f74c, dwMilliseconds=0x1388) 

Thread:
	id = 6
	os_tid = 0x7bc

	[0057.808] GetCurrentThreadId () returned 0x7bc
	[0057.808] GetCurrentThreadId () returned 0x7bc
	[0057.808] GetLastError () returned 0x57
	[0057.808] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x364) returned 0x612278
	[0057.808] SetLastError (dwErrCode=0x57) 
	[0057.808] GetLastError () returned 0x57
	[0057.808] SetLastError (dwErrCode=0x57) 
	[0057.808] WriteFile (in: hFile=0x7, lpBuffer=0x275dfc8*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x275dfc0, lpOverlapped=0x0 | out: lpBuffer=0x275dfc8*, lpNumberOfBytesWritten=0x275dfc0*=0x49, lpOverlapped=0x0) returned 1
	[0057.809] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0074.933] GetLastError () returned 0x102
	[0074.933] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0080.304] GetLastError () returned 0x102
	[0080.304] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0085.657] GetLastError () returned 0x102
	[0085.657] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0090.795] GetLastError () returned 0x102
	[0090.795] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0095.813] GetLastError () returned 0x102
	[0095.813] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0101.120] GetLastError () returned 0x102
	[0101.120] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0110.605] GetLastError () returned 0x102
	[0110.605] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0110.615] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4715616
	[0110.615] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.617] GetLastError () returned 0x3e5
	[0110.617] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0110.642] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5207136
	[0110.642] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.668] GetLastError () returned 0x3e5
	[0110.668] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0110.679] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5698656
	[0110.680] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.681] GetLastError () returned 0x3e5
	[0110.681] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0110.690] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6190176
	[0110.690] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.716] GetLastError () returned 0x3e5
	[0110.716] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0110.727] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6681696
	[0110.727] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.728] GetLastError () returned 0x3e5
	[0110.728] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0110.738] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7173216
	[0110.738] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0110.738] GetLastError () returned 0x3e5
	[0110.739] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0110.746] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=1184 | out: Addend=0xe0dabc) returned 7664736
	[0110.746] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0110.746] GetLastError () returned 0x3e5
	[0110.746] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0110.746] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d4f8
	[0110.747] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351d908
	[0110.747] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d908 | out: hHeap=0x5f0000) returned 1
	[0110.747] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=1184) returned 1
	[0110.747] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.747] GetLastError () returned 0x3e5
	[0110.747] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d4f8 | out: hHeap=0x5f0000) returned 1
	[0110.747] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0111.125] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=93048 | out: Addend=0xe0dacc) returned 7856626
	[0111.127] WriteFile (in: hFile=0x3c8, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x16b80, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0111.127] GetLastError () returned 0x3e5
	[0111.127] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0111.128] GetLastError () returned 0x26
	[0111.128] GetLastError () returned 0x26
	[0111.128] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4ab0020) returned 1
	[0111.128] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0111.129] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0111.129] CancelIo (hFile=0x3c8) returned 1
	[0111.129] CloseHandle (hObject=0x3c8) returned 1
	[0111.130] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0111.130] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0111.130] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4ab0020 | out: hHeap=0x5f0000) returned 1
	[0111.131] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0111.131] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\Zb1DwUD.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\zb1dwud.rtf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\Zb1DwUD.rtf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\zb1dwud.rtf.crypted")) returned 1
	[0111.132] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0111.132] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0111.132] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0111.172] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8441194
	[0111.178] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.180] GetLastError () returned 0x3e5
	[0111.180] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0111.182] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8932714
	[0111.188] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.189] GetLastError () returned 0x3e5
	[0111.190] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0111.212] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9424234
	[0111.218] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.220] GetLastError () returned 0x3e5
	[0111.221] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0111.223] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0111.229] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.231] GetLastError () returned 0x3e5
	[0111.231] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0111.618] GetLastError () returned 0x26
	[0111.618] GetLastError () returned 0x26
	[0111.618] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.618] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0111.618] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0111.618] CancelIo (hFile=0x3c0) returned 1
	[0111.619] CloseHandle (hObject=0x3c0) returned 1
	[0111.620] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0111.620] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0111.620] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0111.621] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0111.621] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mZQFpBApMY.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mzqfpbapmy.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mZQFpBApMY.mkv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mzqfpbapmy.mkv.crypted")) returned 1
	[0111.622] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0111.622] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0111.622] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0111.675] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=10593 | out: Addend=0xe0dacc) returned 4918110
	[0111.675] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x2970, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.676] GetLastError () returned 0x3e5
	[0111.676] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0111.676] GetLastError () returned 0x26
	[0111.676] GetLastError () returned 0x26
	[0111.676] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.676] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0111.677] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0111.677] CancelIo (hFile=0x3c0) returned 1
	[0111.677] CloseHandle (hObject=0x3c0) returned 1
	[0111.678] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0111.678] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0111.678] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0111.679] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0111.679] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nZcAIi.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nzcaii.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nZcAIi.csv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nzcaii.csv.crypted")) returned 1
	[0111.680] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0111.680] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0111.680] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0111.695] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=14355 | out: Addend=0xe0dacc) returned 4928703
	[0111.696] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x3820, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.696] GetLastError () returned 0x3e5
	[0111.696] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0111.696] GetLastError () returned 0x26
	[0111.696] GetLastError () returned 0x26
	[0111.696] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.696] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0111.697] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.697] CancelIo (hFile=0x3c0) returned 1
	[0111.697] CloseHandle (hObject=0x3c0) returned 1
	[0111.708] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0111.708] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633088 | out: hHeap=0x5f0000) returned 1
	[0111.708] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0111.708] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0111.708] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pkjF7CobirRZAfwDqW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pkjf7cobirrzafwdqw.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pkjF7CobirRZAfwDqW.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pkjf7cobirrzafwdqw.wav.crypted")) returned 1
	[0111.709] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0111.709] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.709] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0111.991] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=38365 | out: Addend=0xe0dacc) returned 10371872
	[0111.992] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToWrite=0x95e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 0
	[0111.999] GetLastError () returned 0x3e5
	[0111.999] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.014] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0112.015] GetLastError () returned 0x3e5
	[0112.015] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.016] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=41728 | out: Addend=0xe0dabc) returned 10901872
	[0112.016] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0112.016] GetLastError () returned 0x3e5
	[0112.016] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.017] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0112.017] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351dff0
	[0112.017] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0112.017] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=41728) returned 1
	[0112.017] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.017] GetLastError () returned 0x3e5
	[0112.017] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0112.017] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.047] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=101712 | out: Addend=0xe0dabc) returned 10943600
	[0112.047] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0112.047] GetLastError () returned 0x3e5
	[0112.047] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.047] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0112.047] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351dff0
	[0112.047] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0112.047] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=101712) returned 1
	[0112.048] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.048] GetLastError () returned 0x3e5
	[0112.048] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0112.048] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.087] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=23920 | out: Addend=0xe0dabc) returned 11045312
	[0112.087] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0112.087] GetLastError () returned 0x3e5
	[0112.087] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.088] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0112.088] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351dff0
	[0112.088] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0112.088] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=23920) returned 1
	[0112.088] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.088] GetLastError () returned 0x3e5
	[0112.089] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0112.089] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.122] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=17952 | out: Addend=0xe0dabc) returned 11069232
	[0112.122] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0112.123] GetLastError () returned 0x3e5
	[0112.123] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.123] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0112.123] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351dff0
	[0112.123] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0112.123] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=17952) returned 1
	[0112.123] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.123] GetLastError () returned 0x3e5
	[0112.123] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0112.123] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.148] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=95664 | out: Addend=0xe0dabc) returned 11087184
	[0112.148] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0112.148] GetLastError () returned 0x3e5
	[0112.148] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.148] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0112.148] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351dff0
	[0112.148] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351dff0 | out: hHeap=0x5f0000) returned 1
	[0112.149] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=95664) returned 1
	[0112.149] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.149] GetLastError () returned 0x3e5
	[0112.149] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0112.149] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.183] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=80336 | out: Addend=0xe0dabc) returned 11182848
	[0112.183] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0112.183] GetLastError () returned 0x3e5
	[0112.183] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.183] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cad8
	[0112.183] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351cee8
	[0112.184] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cee8 | out: hHeap=0x5f0000) returned 1
	[0112.184] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=80336) returned 1
	[0112.184] WriteFile (in: hFile=0x3a8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.184] GetLastError () returned 0x3e5
	[0112.184] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0112.184] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.207] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 11754704
	[0112.207] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.220] GetLastError () returned 0x3e5
	[0112.220] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.323] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=39689 | out: Addend=0xe0dacc) returned 0
	[0112.324] WriteFile (in: hFile=0x3a8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x9b10, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0112.324] GetLastError () returned 0x3e5
	[0112.324] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0112.324] GetLastError () returned 0x26
	[0112.324] GetLastError () returned 0x26
	[0112.324] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0112.325] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0112.326] CancelIo (hFile=0x3a8) returned 1
	[0112.326] CloseHandle (hObject=0x3a8) returned 1
	[0112.337] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0112.337] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0112.337] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0112.338] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0112.338] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RYKGI7S1qw5nsZ9RGHHZ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rykgi7s1qw5nsz9rghhz.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RYKGI7S1qw5nsZ9RGHHZ.png.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rykgi7s1qw5nsz9rghhz.png.crypted")) returned 1
	[0112.339] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0112.339] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0112.339] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.340] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=14132 | out: Addend=0xe0dacc) returned 39689
	[0112.341] WriteFile (in: hFile=0x3c0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x3740, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0112.341] GetLastError () returned 0x3e5
	[0112.341] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0112.341] GetLastError () returned 0x26
	[0112.341] GetLastError () returned 0x26
	[0112.341] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0112.341] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.342] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0112.342] CancelIo (hFile=0x3c0) returned 1
	[0112.342] CloseHandle (hObject=0x3c0) returned 1
	[0112.345] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cad8 | out: hHeap=0x5f0000) returned 1
	[0112.345] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633088 | out: hHeap=0x5f0000) returned 1
	[0112.345] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0112.345] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0112.345] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SptlLDw47WFBL.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sptlldw47wfbl.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SptlLDw47WFBL.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sptlldw47wfbl.bmp.crypted")) returned 1
	[0112.347] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0112.347] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0112.347] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.561] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 53821
	[0112.568] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.570] GetLastError () returned 0x3e5
	[0112.570] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.597] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 545341
	[0112.604] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.607] GetLastError () returned 0x3e5
	[0112.607] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.608] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1036861
	[0112.615] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.617] GetLastError () returned 0x3e5
	[0112.617] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.645] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1528381
	[0112.652] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.656] GetLastError () returned 0x3e5
	[0112.656] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.657] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2019901
	[0112.664] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.666] GetLastError () returned 0x3e5
	[0112.666] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.667] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2511421
	[0112.674] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.676] GetLastError () returned 0x3e5
	[0112.676] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.704] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3002941
	[0112.711] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.714] GetLastError () returned 0x3e5
	[0112.714] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.716] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3494461
	[0112.723] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.725] GetLastError () returned 0x3e5
	[0112.725] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.749] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3985981
	[0112.756] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.759] GetLastError () returned 0x3e5
	[0112.759] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.760] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4477501
	[0112.767] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.769] GetLastError () returned 0x3e5
	[0112.769] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.794] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4969021
	[0112.801] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.803] GetLastError () returned 0x3e5
	[0112.804] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.805] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5460541
	[0112.812] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.814] GetLastError () returned 0x3e5
	[0112.814] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.852] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5952061
	[0112.859] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.862] GetLastError () returned 0x3e5
	[0112.862] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.863] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6443581
	[0112.870] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.872] GetLastError () returned 0x3e5
	[0112.872] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.897] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6935101
	[0112.904] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.908] GetLastError () returned 0x3e5
	[0112.908] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0112.909] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7426621
	[0112.916] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0112.918] GetLastError () returned 0x3e5
	[0112.918] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.157] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7918141
	[0113.164] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0113.320] GetLastError () returned 0x3e5
	[0113.320] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.469] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0113.469] GetLastError () returned 0x3e5
	[0113.469] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.487] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.487] GetLastError () returned 0x3e5
	[0113.487] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.488] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=1760 | out: Addend=0xe0dabc) returned 0
	[0113.488] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0113.488] GetLastError () returned 0x3e5
	[0113.488] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.488] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0113.488] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0113.489] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0113.489] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=1760) returned 1
	[0113.489] WriteFile (in: hFile=0x3c4, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.489] GetLastError () returned 0x3e5
	[0113.489] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0113.489] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0113.525] GetLastError () returned 0x26
	[0113.525] GetLastError () returned 0x26
	[0113.525] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0113.525] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.526] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0113.526] CancelIo (hFile=0x3c0) returned 1
	[0113.526] CloseHandle (hObject=0x3c0) returned 1
	[0113.528] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522790 | out: hHeap=0x5f0000) returned 1
	[0113.529] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0113.529] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0113.529] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0113.529] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SZ wLbnmZnssv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sz wlbnmznssv.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SZ wLbnmZnssv.png.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sz wlbnmznssv.png.crypted")) returned 1
	[0113.530] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0113.530] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0113.531] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.654] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 575697
	[0113.661] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.663] GetLastError () returned 0x3e5
	[0113.663] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.693] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1067217
	[0113.700] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.703] GetLastError () returned 0x3e5
	[0113.703] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.704] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1558737
	[0113.712] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0113.713] GetLastError () returned 0x3e5
	[0113.714] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0113.732] GetLastError () returned 0x26
	[0113.732] GetLastError () returned 0x26
	[0113.732] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.732] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.733] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0113.733] CancelIo (hFile=0x3c8) returned 1
	[0113.733] CloseHandle (hObject=0x3c8) returned 1
	[0113.737] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522790 | out: hHeap=0x5f0000) returned 1
	[0113.737] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0113.737] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0113.738] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0113.738] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wDmQnqmqed3\\hJ-pTKrnE.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wdmqnqmqed3\\hj-ptkrne.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wDmQnqmqed3\\hJ-pTKrnE.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wdmqnqmqed3\\hj-ptkrne.wav.crypted")) returned 1
	[0113.740] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0113.740] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0113.740] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.759] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=49023 | out: Addend=0xe0dacc) returned 2071166
	[0113.760] WriteFile (in: hFile=0x3c8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xbf80, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0113.761] GetLastError () returned 0x3e5
	[0113.761] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0113.761] GetLastError () returned 0x26
	[0113.761] GetLastError () returned 0x26
	[0113.761] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0113.761] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0113.762] CancelIo (hFile=0x3c8) returned 1
	[0113.762] CloseHandle (hObject=0x3c8) returned 1
	[0113.764] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522790 | out: hHeap=0x5f0000) returned 1
	[0113.764] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0113.764] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0113.765] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0113.765] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wDmQnqmqed3\\pAvEBY4.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wdmqnqmqed3\\paveby4.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wDmQnqmqed3\\pAvEBY4.flv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wdmqnqmqed3\\paveby4.flv.crypted")) returned 1
	[0113.766] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0113.766] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0113.766] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.806] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.806] GetLastError () returned 0x3e5
	[0113.806] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.808] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=60240 | out: Addend=0xe0dabc) returned 2120208
	[0113.808] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0113.808] GetLastError () returned 0x3e5
	[0113.808] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.809] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0113.809] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0113.809] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0113.809] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=60240) returned 1
	[0113.809] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.809] GetLastError () returned 0x3e5
	[0113.809] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0113.809] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.846] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=30913 | out: Addend=0xe0dacc) returned 2180421
	[0113.847] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x78d0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.847] GetLastError () returned 0x3e5
	[0113.847] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0113.848] GetLastError () returned 0x26
	[0113.848] GetLastError () returned 0x26
	[0113.848] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.848] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.849] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x632f78
	[0113.849] CancelIo (hFile=0x3c8) returned 1
	[0113.849] CloseHandle (hObject=0x3c8) returned 1
	[0113.857] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3521c18 | out: hHeap=0x5f0000) returned 1
	[0113.857] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0113.857] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0113.857] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0113.858] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xn4YV2mMv8OQOTNNOu.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xn4yv2mmv8oqotnnou.doc"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xn4YV2mMv8OQOTNNOu.doc.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xn4yv2mmv8oqotnnou.doc.crypted")) returned 1
	[0113.859] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0113.859] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x632f78 | out: hHeap=0x5f0000) returned 1
	[0113.859] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.877] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.878] GetLastError () returned 0x3e5
	[0113.878] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.879] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=45728 | out: Addend=0xe0dabc) returned 2211376
	[0113.879] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0113.879] GetLastError () returned 0x3e5
	[0113.879] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.880] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0113.880] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0113.880] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0113.880] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=45728) returned 1
	[0113.880] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.880] GetLastError () returned 0x3e5
	[0113.881] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0113.881] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.892] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=18368 | out: Addend=0xe0dabc) returned 2257104
	[0113.892] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0113.892] GetLastError () returned 0x3e5
	[0113.892] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.892] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0113.893] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0113.893] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0113.893] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=18368) returned 1
	[0113.893] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0113.893] GetLastError () returned 0x3e5
	[0113.893] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0113.893] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.940] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=91409 | out: Addend=0xe0dacc) returned 2275418
	[0113.941] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x16520, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.942] GetLastError () returned 0x3e5
	[0113.942] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0113.942] GetLastError () returned 0x26
	[0113.942] GetLastError () returned 0x26
	[0113.942] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.943] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.944] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0113.944] CancelIo (hFile=0x3c8) returned 1
	[0113.944] CloseHandle (hObject=0x3c8) returned 1
	[0113.953] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3521c18 | out: hHeap=0x5f0000) returned 1
	[0113.953] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0113.953] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0113.953] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0113.954] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B2WwS.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b2wws.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B2WwS.xlsx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b2wws.xlsx.crypted")) returned 1
	[0113.955] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0113.955] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0113.955] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.973] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.974] GetLastError () returned 0x3e5
	[0113.974] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.976] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=72768 | out: Addend=0xe0dabc) returned 2366896
	[0113.976] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0113.976] GetLastError () returned 0x3e5
	[0113.976] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0113.977] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0113.977] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0113.977] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0113.977] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=72768) returned 1
	[0113.977] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0113.977] GetLastError () returned 0x3e5
	[0113.977] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0113.977] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.002] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=64284 | out: Addend=0xe0dacc) returned 2439585
	[0114.035] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0xfb20, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0114.035] GetLastError () returned 0x3e5
	[0114.035] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0114.036] GetLastError () returned 0x26
	[0114.036] GetLastError () returned 0x26
	[0114.036] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0114.036] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.038] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.038] CancelIo (hFile=0x3c8) returned 1
	[0114.038] CloseHandle (hObject=0x3c8) returned 1
	[0114.042] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3521c18 | out: hHeap=0x5f0000) returned 1
	[0114.042] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0114.042] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0114.043] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0114.043] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CnKdAfDz9Qc.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cnkdafdz9qc.rtf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CnKdAfDz9Qc.rtf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cnkdafdz9qc.rtf.crypted")) returned 1
	[0114.044] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0114.044] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.044] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.062] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0114.063] GetLastError () returned 0x3e5
	[0114.063] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.064] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=26992 | out: Addend=0xe0dabc) returned 2503952
	[0114.064] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0114.064] GetLastError () returned 0x3e5
	[0114.064] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.064] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0114.064] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351edc0
	[0114.065] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351edc0 | out: hHeap=0x5f0000) returned 1
	[0114.065] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=26992) returned 1
	[0114.065] WriteFile (in: hFile=0x3c8, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0114.065] GetLastError () returned 0x3e5
	[0114.065] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0114.065] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.086] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=63888 | out: Addend=0xe0dabc) returned 2530944
	[0114.086] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0114.086] GetLastError () returned 0x3e5
	[0114.086] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.087] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x40819f8
	[0114.087] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3524cc0
	[0114.087] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3524cc0 | out: hHeap=0x5f0000) returned 1
	[0114.087] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=63888) returned 1
	[0114.087] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.087] GetLastError () returned 0x3e5
	[0114.087] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0114.087] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.152] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3086259
	[0114.159] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.161] GetLastError () returned 0x3e5
	[0114.161] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.180] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3577779
	[0114.184] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.187] GetLastError () returned 0x3e5
	[0114.187] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.188] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4069299
	[0114.195] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.197] GetLastError () returned 0x3e5
	[0114.197] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.213] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4560819
	[0114.219] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0114.223] GetLastError () returned 0x3e5
	[0114.223] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0114.235] GetLastError () returned 0x26
	[0114.235] GetLastError () returned 0x26
	[0114.235] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0114.235] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.236] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0114.236] CancelIo (hFile=0x3c0) returned 1
	[0114.236] CloseHandle (hObject=0x3c0) returned 1
	[0114.238] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522790 | out: hHeap=0x5f0000) returned 1
	[0114.238] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0114.239] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0114.239] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0114.239] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GBUjSuawrY1cxW1\\Qj7SeAjO hbObQDHc.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbujsuawry1cxw1\\qj7seajo hbobqdhc.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GBUjSuawrY1cxW1\\Qj7SeAjO hbObQDHc.xlsx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbujsuawry1cxw1\\qj7seajo hbobqdhc.xlsx.crypted")) returned 1
	[0114.241] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0114.241] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0114.241] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.270] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=80769 | out: Addend=0xe0dacc) returned 5123726
	[0114.271] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x13b90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.272] GetLastError () returned 0x3e5
	[0114.272] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0114.273] GetLastError () returned 0x26
	[0114.273] GetLastError () returned 0x26
	[0114.273] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0114.273] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.274] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0114.274] CancelIo (hFile=0x3c0) returned 1
	[0114.274] CloseHandle (hObject=0x3c0) returned 1
	[0114.276] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522790 | out: hHeap=0x5f0000) returned 1
	[0114.277] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0114.277] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0114.277] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0114.277] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GBUjSuawrY1cxW1\\rdnAIKhyNP-.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbujsuawry1cxw1\\rdnaikhynp-.odp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GBUjSuawrY1cxW1\\rdnAIKhyNP-.odp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbujsuawry1cxw1\\rdnaikhynp-.odp.crypted")) returned 1
	[0114.278] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0114.278] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0114.278] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.295] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=36891 | out: Addend=0xe0dacc) returned 5204495
	[0114.295] WriteFile (in: hFile=0x3c0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x9020, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.296] GetLastError () returned 0x3e5
	[0114.296] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0114.296] GetLastError () returned 0x26
	[0114.296] GetLastError () returned 0x26
	[0114.296] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0114.296] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.297] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0114.297] CancelIo (hFile=0x3c0) returned 1
	[0114.297] CloseHandle (hObject=0x3c0) returned 1
	[0114.299] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522790 | out: hHeap=0x5f0000) returned 1
	[0114.299] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0114.299] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0114.300] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0114.300] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GBUjSuawrY1cxW1\\Y1xI22.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbujsuawry1cxw1\\y1xi22.doc"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GBUjSuawrY1cxW1\\Y1xI22.doc.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbujsuawry1cxw1\\y1xi22.doc.crypted")) returned 1
	[0114.300] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0114.301] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0114.301] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.321] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=7995 | out: Addend=0xe0dacc) returned 5241386
	[0114.322] WriteFile (in: hFile=0x3c8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.322] GetLastError () returned 0x3e5
	[0114.322] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0114.322] GetLastError () returned 0x26
	[0114.322] GetLastError () returned 0x26
	[0114.322] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0114.323] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.324] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0114.324] CancelIo (hFile=0x3c8) returned 1
	[0114.324] CloseHandle (hObject=0x3c8) returned 1
	[0114.328] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522790 | out: hHeap=0x5f0000) returned 1
	[0114.328] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0114.328] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0114.329] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0114.329] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gHmp.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ghmp.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gHmp.docx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ghmp.docx.crypted")) returned 1
	[0114.330] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0114.330] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0114.330] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.348] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=71775 | out: Addend=0xe0dacc) returned 5249381
	[0114.350] WriteFile (in: hFile=0x3c8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x11860, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.350] GetLastError () returned 0x3e5
	[0114.350] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0114.351] GetLastError () returned 0x26
	[0114.351] GetLastError () returned 0x26
	[0114.351] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0114.351] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.352] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.352] CancelIo (hFile=0x3c8) returned 1
	[0114.352] CloseHandle (hObject=0x3c8) returned 1
	[0114.353] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522790 | out: hHeap=0x5f0000) returned 1
	[0114.353] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0114.354] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0114.354] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0114.354] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H_XLsW OknG.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\h_xlsw okng.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H_XLsW OknG.xlsx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\h_xlsw okng.xlsx.crypted")) returned 1
	[0114.355] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0114.355] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.355] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.373] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=25544 | out: Addend=0xe0dacc) returned 5321156
	[0114.374] WriteFile (in: hFile=0x3c8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x63d0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.374] GetLastError () returned 0x3e5
	[0114.374] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0114.374] GetLastError () returned 0x26
	[0114.374] GetLastError () returned 0x26
	[0114.374] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0114.374] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.375] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0114.375] CancelIo (hFile=0x3c8) returned 1
	[0114.375] CloseHandle (hObject=0x3c8) returned 1
	[0114.377] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522790 | out: hHeap=0x5f0000) returned 1
	[0114.377] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.377] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0114.378] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0114.378] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ISYWXm4yMp05dI6.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\isywxm4ymp05di6.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ISYWXm4yMp05dI6.pptx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\isywxm4ymp05di6.pptx.crypted")) returned 1
	[0114.379] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0114.379] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0114.379] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.396] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=60088 | out: Addend=0xe0dacc) returned 5346700
	[0114.397] WriteFile (in: hFile=0x3c8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xeac0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0114.398] GetLastError () returned 0x3e5
	[0114.398] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0114.398] GetLastError () returned 0x26
	[0114.398] GetLastError () returned 0x26
	[0114.398] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0114.398] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.399] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.399] CancelIo (hFile=0x3c8) returned 1
	[0114.399] CloseHandle (hObject=0x3c8) returned 1
	[0114.401] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522790 | out: hHeap=0x5f0000) returned 1
	[0114.401] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0114.401] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0114.402] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0114.402] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\k5n4LQZahDLV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\k5n4lqzahdlv.pptx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\k5n4LQZahDLV.pptx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\k5n4lqzahdlv.pptx.crypted")) returned 1
	[0114.403] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0114.403] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.403] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.418] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5406928
	[0114.418] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.437] GetLastError () returned 0x3e5
	[0114.437] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.450] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5898448
	[0114.450] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.450] GetLastError () returned 0x3e5
	[0114.450] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.458] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6389968
	[0114.458] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0114.910] GetLastError () returned 0x3e5
	[0114.910] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0114.920] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0114.920] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0114.961] GetLastError () returned 0x3e5
	[0114.962] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.586] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0115.590] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0115.591] GetLastError () returned 0x3e5
	[0115.592] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.602] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0115.606] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0115.608] GetLastError () returned 0x3e5
	[0115.608] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.722] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0115.722] GetLastError () returned 0x3e5
	[0115.722] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.724] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=78768 | out: Addend=0xe0dabc) returned 983040
	[0115.724] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0115.724] GetLastError () returned 0x3e5
	[0115.724] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.724] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.724] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4040048
	[0115.724] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040048 | out: hHeap=0x5f0000) returned 1
	[0115.725] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=78768) returned 1
	[0115.725] WriteFile (in: hFile=0x3c4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0115.725] GetLastError () returned 0x3e5
	[0115.725] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.725] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.742] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=82846 | out: Addend=0xe0dacc) returned 1061793
	[0115.743] WriteFile (in: hFile=0x3c4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x143a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0115.743] GetLastError () returned 0x3e5
	[0115.743] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0115.744] GetLastError () returned 0x26
	[0115.744] GetLastError () returned 0x26
	[0115.744] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0115.744] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.745] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.745] CancelIo (hFile=0x3c4) returned 1
	[0115.745] CloseHandle (hObject=0x3c4) returned 1
	[0115.747] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.747] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0115.747] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0115.747] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0115.747] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NotZWjjg-Ncw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\notzwjjg-ncw.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NotZWjjg-Ncw.docx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\notzwjjg-ncw.docx.crypted")) returned 1
	[0115.748] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0115.748] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.748] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.762] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0115.762] GetLastError () returned 0x3e5
	[0115.762] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.763] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=50784 | out: Addend=0xe0dabc) returned 1144656
	[0115.763] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0115.763] GetLastError () returned 0x3e5
	[0115.763] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.763] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.763] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4040048
	[0115.764] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040048 | out: hHeap=0x5f0000) returned 1
	[0115.764] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=50784) returned 1
	[0115.764] WriteFile (in: hFile=0x3c4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0115.764] GetLastError () returned 0x3e5
	[0115.764] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.764] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.785] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=271360 | out: Addend=0xe0dacc) returned 1195421
	[0115.787] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x42400, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0115.788] GetLastError () returned 0x3e5
	[0115.788] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0115.789] GetLastError () returned 0x26
	[0115.789] GetLastError () returned 0x26
	[0115.789] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0115.789] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.789] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0115.789] CancelIo (hFile=0x38c) returned 1
	[0115.790] CloseHandle (hObject=0x38c) returned 1
	[0115.794] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.794] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0115.794] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0115.794] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0115.794] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.crypted")) returned 1
	[0115.795] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0115.795] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0115.795] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.806] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=29926 | out: Addend=0xe0dacc) returned 1466781
	[0115.807] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x74f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.807] GetLastError () returned 0x3e5
	[0115.807] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0115.807] GetLastError () returned 0x26
	[0115.807] GetLastError () returned 0x26
	[0115.807] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0115.807] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.808] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0115.808] CancelIo (hFile=0x3d8) returned 1
	[0115.808] CloseHandle (hObject=0x3d8) returned 1
	[0115.809] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0115.809] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0115.809] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0115.810] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0115.810] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico.crypted")) returned 1
	[0115.810] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0115.810] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0115.810] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.816] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=93444 | out: Addend=0xe0dacc) returned 1496707
	[0115.816] WriteFile (in: hFile=0x3c4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x16d10, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0115.817] GetLastError () returned 0x3e5
	[0115.817] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0115.817] GetLastError () returned 0x26
	[0115.817] GetLastError () returned 0x26
	[0115.817] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0115.817] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.818] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.818] CancelIo (hFile=0x3c4) returned 1
	[0115.818] CloseHandle (hObject=0x3c4) returned 1
	[0115.820] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.820] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0115.820] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0115.820] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0115.820] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ou_9PeTleJWmDJh.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ou_9petlejwmdjh.ppt"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ou_9PeTleJWmDJh.ppt.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ou_9petlejwmdjh.ppt.crypted")) returned 1
	[0115.821] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0115.821] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.821] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.835] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=91646 | out: Addend=0xe0dacc) returned 1590151
	[0115.836] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x16600, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.836] GetLastError () returned 0x3e5
	[0115.836] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0115.837] GetLastError () returned 0x26
	[0115.837] GetLastError () returned 0x26
	[0115.837] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0115.837] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.838] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0115.838] CancelIo (hFile=0x3c4) returned 1
	[0115.838] CloseHandle (hObject=0x3c4) returned 1
	[0115.842] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.842] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0115.842] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0115.842] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0115.842] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OYvHbSxRyDdIlTwvwD5Y.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oyvhbsxryddiltwvwd5y.csv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OYvHbSxRyDdIlTwvwD5Y.csv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oyvhbsxryddiltwvwd5y.csv.crypted")) returned 1
	[0115.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0115.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0115.843] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.857] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=36082 | out: Addend=0xe0dacc) returned 1681797
	[0115.857] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x8d00, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.857] GetLastError () returned 0x3e5
	[0115.857] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0115.857] GetLastError () returned 0x26
	[0115.857] GetLastError () returned 0x26
	[0115.857] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0115.858] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.858] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0115.858] CancelIo (hFile=0x3c4) returned 1
	[0115.858] CloseHandle (hObject=0x3c4) returned 1
	[0115.860] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.860] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.860] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0115.861] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0115.861] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PQD6yoKepl2tUhqv.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pqd6yokepl2tuhqv.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PQD6yoKepl2tUhqv.ots.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pqd6yokepl2tuhqv.ots.crypted")) returned 1
	[0115.862] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0115.862] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0115.862] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.885] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=82632 | out: Addend=0xe0dacc) returned 1717879
	[0115.886] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x142d0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.886] GetLastError () returned 0x3e5
	[0115.886] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0115.887] GetLastError () returned 0x26
	[0115.887] GetLastError () returned 0x26
	[0115.887] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0115.887] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.887] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.887] CancelIo (hFile=0x3c4) returned 1
	[0115.887] CloseHandle (hObject=0x3c4) returned 1
	[0115.889] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.889] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0115.889] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0115.889] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0115.889] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qt_0Ae0ejm m9J3.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qt_0ae0ejm m9j3.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qt_0Ae0ejm m9J3.xlsx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qt_0ae0ejm m9j3.xlsx.crypted")) returned 1
	[0115.890] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0115.890] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.890] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.903] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=39827 | out: Addend=0xe0dacc) returned 1800511
	[0115.904] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x9ba0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.904] GetLastError () returned 0x3e5
	[0115.904] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0115.904] GetLastError () returned 0x26
	[0115.904] GetLastError () returned 0x26
	[0115.904] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0115.904] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.905] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0115.905] CancelIo (hFile=0x3c4) returned 1
	[0115.905] CloseHandle (hObject=0x3c4) returned 1
	[0115.906] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.906] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.906] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0115.907] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0115.907] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uMRDEqKnwX4z.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\umrdeqknwx4z.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uMRDEqKnwX4z.xlsx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\umrdeqknwx4z.xlsx.crypted")) returned 1
	[0115.908] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0115.908] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0115.908] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.922] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=48375 | out: Addend=0xe0dacc) returned 1840338
	[0115.923] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xbd00, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.923] GetLastError () returned 0x3e5
	[0115.923] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0115.923] GetLastError () returned 0x26
	[0115.924] GetLastError () returned 0x26
	[0115.924] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0115.924] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.924] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0115.924] CancelIo (hFile=0x3d8) returned 1
	[0115.924] CloseHandle (hObject=0x3d8) returned 1
	[0115.926] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.926] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0115.926] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0115.926] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40819f8
	[0115.926] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\DqTNceakNegr1Lc6u.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\dqtnceaknegr1lc6u.odp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\DqTNceakNegr1Lc6u.odp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\dqtnceaknegr1lc6u.odp.crypted")) returned 1
	[0115.927] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0115.927] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0115.927] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.941] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=63525 | out: Addend=0xe0dacc) returned 1888713
	[0115.942] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xf830, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.942] GetLastError () returned 0x3e5
	[0115.942] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0115.943] GetLastError () returned 0x26
	[0115.943] GetLastError () returned 0x26
	[0115.943] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0115.943] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0115.943] CancelIo (hFile=0x3d8) returned 1
	[0115.943] CloseHandle (hObject=0x3d8) returned 1
	[0115.949] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.949] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0115.949] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0115.950] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40819f8
	[0115.950] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\FbTAEINyMadIMg82TCw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\fbtaeinymadimg82tcw.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\FbTAEINyMadIMg82TCw.docx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\fbtaeinymadimg82tcw.docx.crypted")) returned 1
	[0115.951] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0115.951] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0115.951] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.964] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=2089 | out: Addend=0xe0dacc) returned 1952238
	[0115.964] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.964] GetLastError () returned 0x3e5
	[0115.964] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0115.965] GetLastError () returned 0x26
	[0115.965] GetLastError () returned 0x26
	[0115.965] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0115.965] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.965] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0115.965] CancelIo (hFile=0x3d8) returned 1
	[0115.965] CloseHandle (hObject=0x3d8) returned 1
	[0115.966] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.967] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0115.967] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0115.967] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0115.967] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\rMK5oPo1Ag.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\rmk5opo1ag.rtf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\rMK5oPo1Ag.rtf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\rmk5opo1ag.rtf.crypted")) returned 1
	[0115.968] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0115.968] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0115.968] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.981] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=76046 | out: Addend=0xe0dacc) returned 1954327
	[0115.982] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x12910, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.983] GetLastError () returned 0x3e5
	[0115.983] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0115.983] GetLastError () returned 0x26
	[0115.983] GetLastError () returned 0x26
	[0115.983] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0115.983] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0115.984] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0115.984] CancelIo (hFile=0x3d8) returned 1
	[0115.984] CloseHandle (hObject=0x3d8) returned 1
	[0115.985] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0115.985] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0115.985] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0115.986] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0115.986] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\uOd1E gUA.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\uod1e gua.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\uOd1E gUA.ots.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\uod1e gua.ots.crypted")) returned 1
	[0115.989] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0115.989] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0115.989] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.004] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=2339 | out: Addend=0xe0dacc) returned 2030373
	[0116.004] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.004] GetLastError () returned 0x3e5
	[0116.004] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0116.004] GetLastError () returned 0x26
	[0116.004] GetLastError () returned 0x26
	[0116.004] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.005] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.005] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0116.005] CancelIo (hFile=0x38c) returned 1
	[0116.005] CloseHandle (hObject=0x38c) returned 1
	[0116.006] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0116.006] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0116.006] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.007] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.007] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\E5ymgx3tJCrzT SmyyC.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\e5ymgx3tjcrzt smyyc.docx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\E5ymgx3tJCrzT SmyyC.docx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\e5ymgx3tjcrzt smyyc.docx.crypted")) returned 1
	[0116.007] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.007] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0116.008] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.022] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=23110 | out: Addend=0xe0dacc) returned 2032712
	[0116.023] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x5a50, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.023] GetLastError () returned 0x3e5
	[0116.023] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0116.023] GetLastError () returned 0x26
	[0116.023] GetLastError () returned 0x26
	[0116.023] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.023] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.024] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0116.024] CancelIo (hFile=0x3dc) returned 1
	[0116.024] CloseHandle (hObject=0x3dc) returned 1
	[0116.064] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0116.064] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0116.064] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.065] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0116.065] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\P0V7vZLRf\\N7tvAd1fnS3.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\p0v7vzlrf\\n7tvad1fns3.ots"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\P0V7vZLRf\\N7tvAd1fnS3.ots.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\p0v7vzlrf\\n7tvad1fns3.ots.crypted")) returned 1
	[0116.125] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0116.125] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0116.125] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.259] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=16126 | out: Addend=0xe0dacc) returned 2366518
	[0116.259] WriteFile (in: hFile=0x3e4, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0116.263] GetLastError () returned 0x3e5
	[0116.263] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.264] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=59095 | out: Addend=0xe0dacc) returned 2382644
	[0116.264] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0xe6e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.264] GetLastError () returned 0x3e5
	[0116.265] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0116.265] GetLastError () returned 0x26
	[0116.265] GetLastError () returned 0x26
	[0116.265] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0116.265] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.266] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x40819f8
	[0116.266] CancelIo (hFile=0x38c) returned 1
	[0116.266] CloseHandle (hObject=0x38c) returned 1
	[0116.267] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0116.267] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.267] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0116.268] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x110) returned 0x351fec8
	[0116.268] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\AA7WI-0ERcyU\\HJWs1YBHxBPTQCHH2Q.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\aa7wi-0ercyu\\hjws1ybhxbptqchh2q.odp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\AA7WI-0ERcyU\\HJWs1YBHxBPTQCHH2Q.odp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\aa7wi-0ercyu\\hjws1ybhxbptqchh2q.odp.crypted")) returned 1
	[0116.268] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0116.268] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.268] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.276] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.276] GetLastError () returned 0x3e5
	[0116.276] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.277] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=4656 | out: Addend=0xe0dabc) returned 2441920
	[0116.277] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0116.277] GetLastError () returned 0x3e5
	[0116.277] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.277] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cfd0
	[0116.277] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0116.277] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0116.277] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=4656) returned 1
	[0116.277] WriteFile (in: hFile=0x3ec, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.278] GetLastError () returned 0x3e5
	[0116.278] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cfd0 | out: hHeap=0x5f0000) returned 1
	[0116.278] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.299] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=18653 | out: Addend=0xe0dacc) returned 2446386
	[0116.299] WriteFile (in: hFile=0x3ec, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x48e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.299] GetLastError () returned 0x3e5
	[0116.299] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0116.300] GetLastError () returned 0x26
	[0116.300] GetLastError () returned 0x26
	[0116.300] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.300] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.301] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0116.301] CancelIo (hFile=0x3ec) returned 1
	[0116.301] CloseHandle (hObject=0x3ec) returned 1
	[0116.303] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0116.303] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0116.303] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.303] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0116.304] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\8BrStyEzQnzfF9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\8brstyezqnzff9.xlsx"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\8BrStyEzQnzfF9.xlsx.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\8brstyezqnzff9.xlsx.crypted")) returned 1
	[0116.304] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0116.304] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0116.304] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.314] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2465039
	[0116.320] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0116.337] GetLastError () returned 0x3e5
	[0116.337] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.353] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0116.353] GetLastError () returned 0x3e5
	[0116.353] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.355] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=36480 | out: Addend=0xe0dabc) returned 2956752
	[0116.355] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.355] GetLastError () returned 0x3e5
	[0116.355] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.355] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0116.355] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0116.355] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0116.355] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=36480) returned 1
	[0116.356] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.356] GetLastError () returned 0x3e5
	[0116.356] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.356] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.382] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=45286 | out: Addend=0xe0dacc) returned 2993028
	[0116.383] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xb0f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.384] GetLastError () returned 0x3e5
	[0116.384] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0116.384] GetLastError () returned 0x26
	[0116.384] GetLastError () returned 0x26
	[0116.384] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0116.384] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.385] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x140) returned 0x3528cb8
	[0116.385] CancelIo (hFile=0x3dc) returned 1
	[0116.386] CloseHandle (hObject=0x3dc) returned 1
	[0116.387] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047060 | out: hHeap=0x5f0000) returned 1
	[0116.387] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35288e0 | out: hHeap=0x5f0000) returned 1
	[0116.387] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0116.388] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x150) returned 0x672b98
	[0116.388] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\av7UdVnl1f2 v.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\av7udvnl1f2 v.xls"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\av7UdVnl1f2 v.xls.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\av7udvnl1f2 v.xls.crypted")) returned 1
	[0116.389] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672b98 | out: hHeap=0x5f0000) returned 1
	[0116.389] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3528cb8 | out: hHeap=0x5f0000) returned 1
	[0116.389] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.406] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.407] GetLastError () returned 0x3e5
	[0116.407] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.421] ReadFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.427] GetLastError () returned 0x3e5
	[0116.427] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.445] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=73408 | out: Addend=0xe0dabc) returned 3104064
	[0116.445] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.450] GetLastError () returned 0x3e5
	[0116.450] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.461] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=97722 | out: Addend=0xe0dacc) returned 3177251
	[0116.462] WriteFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToWrite=0x17dc0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 0
	[0116.467] GetLastError () returned 0x3e5
	[0116.467] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.482] ReadFile (in: hFile=0x3e4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.488] GetLastError () returned 0x3e5
	[0116.488] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.501] ReadFile (in: hFile=0x3e4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.503] GetLastError () returned 0x3e5
	[0116.503] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.517] ReadFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.523] GetLastError () returned 0x3e5
	[0116.523] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.538] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.544] GetLastError () returned 0x3e5
	[0116.544] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.559] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.567] GetLastError () returned 0x3e5
	[0116.567] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.582] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.593] GetLastError () returned 0x3e5
	[0116.593] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.603] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0116.603] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0116.603] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0116.603] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=91040) returned 1
	[0116.603] WriteFile (in: hFile=0x3e4, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0116.608] GetLastError () returned 0x3e5
	[0116.608] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.608] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.617] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=60323 | out: Addend=0xe0dacc) returned 70015
	[0116.618] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToWrite=0xebb0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 0
	[0116.623] GetLastError () returned 0x3e5
	[0116.623] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.640] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.645] GetLastError () returned 0x3e5
	[0116.645] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.661] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.667] GetLastError () returned 0x3e5
	[0116.667] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.684] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.690] GetLastError () returned 0x3e5
	[0116.690] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.703] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.730] GetLastError () returned 0x3e5
	[0116.730] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.743] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.747] GetLastError () returned 0x3e5
	[0116.747] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.760] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.765] GetLastError () returned 0x3e5
	[0116.765] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.801] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 898203
	[0116.809] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0116.845] GetLastError () returned 0x3e5
	[0116.845] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.853] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=236 | out: Addend=0xe0dacc) returned 1881243
	[0116.853] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0116.858] GetLastError () returned 0x3e5
	[0116.858] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0116.884] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1881479
	[0116.897] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0117.005] GetLastError () returned 0x3e5
	[0117.005] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0117.019] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=226 | out: Addend=0xe0dacc) returned 4339079
	[0117.019] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0117.046] GetLastError () returned 0x3e5
	[0117.046] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0117.131] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 4339571
	[0117.131] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0117.135] GetLastError () returned 0x3e5
	[0117.135] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0117.137] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 4339704
	[0117.137] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 0
	[0117.142] GetLastError () returned 0x3e5
	[0117.142] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0117.159] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 4339968
	[0117.159] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0117.163] GetLastError () returned 0x3e5
	[0117.163] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0117.179] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 4339971
	[0117.179] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.182] GetLastError () returned 0x3e5
	[0117.182] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0117.202] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 4340256
	[0117.202] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0117.206] GetLastError () returned 0x3e5
	[0117.206] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0117.550] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 10730592
	[0117.551] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0117.563] GetLastError () returned 0x3e5
	[0117.563] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0117.598] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=486 | out: Addend=0xe0dacc) returned 0
	[0117.598] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0117.604] GetLastError () returned 0x3e5
	[0117.604] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0117.606] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=929 | out: Addend=0xe0dacc) returned 486
	[0117.606] WriteFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 0
	[0117.614] GetLastError () returned 0x3e5
	[0117.614] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0117.647] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=363 | out: Addend=0xe0dacc) returned 1415
	[0117.647] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0117.654] GetLastError () returned 0x3e5
	[0117.654] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0117.666] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1778
	[0117.673] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0117.710] GetLastError () returned 0x3e5
	[0117.710] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0118.110] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=6804 | out: Addend=0xe0dacc) returned 6296752
	[0118.110] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToWrite=0x1aa0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 0
	[0118.119] GetLastError () returned 0x3e5
	[0118.119] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0118.137] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0118.146] GetLastError () returned 0x3e5
	[0118.147] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0118.163] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0118.170] GetLastError () returned 0x3e5
	[0118.170] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0118.188] ReadFile (in: hFile=0x3e4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0118.195] GetLastError () returned 0x3e5
	[0118.195] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0118.217] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6374864
	[0118.217] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0118.349] GetLastError () returned 0x3e5
	[0118.349] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0118.547] ReadFile (in: hFile=0x3dc, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0118.558] GetLastError () returned 0x3e5
	[0118.558] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0118.559] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9222400
	[0118.559] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0118.701] GetLastError () returned 0x3e5
	[0118.701] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0118.724] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=74311 | out: Addend=0xe0dacc) returned 2457600
	[0118.725] WriteFile (in: hFile=0x37c, lpBuffer=0x4db0054, nNumberOfBytesToWrite=0x12250, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 0
	[0118.732] GetLastError () returned 0x3e5
	[0118.733] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.043] ReadFile (in: hFile=0x37c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.051] GetLastError () returned 0x3e5
	[0119.051] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.069] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.069] GetLastError () returned 0x3e5
	[0119.069] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.071] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=80096 | out: Addend=0xe0dabc) returned 6778624
	[0119.071] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.071] GetLastError () returned 0x3e5
	[0119.071] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.071] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0119.071] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0119.071] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0119.071] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=80096) returned 1
	[0119.071] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.072] GetLastError () returned 0x3e5
	[0119.072] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.072] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.105] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=41968 | out: Addend=0xe0dacc) returned 6858676
	[0119.105] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xa3f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.105] GetLastError () returned 0x3e5
	[0119.105] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0119.106] GetLastError () returned 0x26
	[0119.106] GetLastError () returned 0x26
	[0119.106] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.106] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.106] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0119.106] CancelIo (hFile=0x38c) returned 1
	[0119.107] CloseHandle (hObject=0x38c) returned 1
	[0119.108] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0119.108] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0119.108] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.109] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0119.109] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\n1XQST.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\n1xqst.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\n1XQST.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\n1xqst.wav.crypted")) returned 1
	[0119.110] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0119.110] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0119.110] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.123] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.123] GetLastError () returned 0x3e5
	[0119.123] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.125] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=41696 | out: Addend=0xe0dabc) returned 6900688
	[0119.125] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.125] GetLastError () returned 0x3e5
	[0119.125] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.125] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0119.125] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0119.125] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0119.125] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=41696) returned 1
	[0119.125] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.126] GetLastError () returned 0x3e5
	[0119.126] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.126] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.149] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=25485 | out: Addend=0xe0dacc) returned 6942340
	[0119.150] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x6390, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.150] GetLastError () returned 0x3e5
	[0119.150] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0119.150] GetLastError () returned 0x26
	[0119.150] GetLastError () returned 0x26
	[0119.150] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.150] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.151] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0119.151] CancelIo (hFile=0x38c) returned 1
	[0119.151] CloseHandle (hObject=0x38c) returned 1
	[0119.156] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0119.156] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0119.156] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.157] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0119.157] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\-MgDAYK0z.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\-mgdayk0z.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\-MgDAYK0z.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\-mgdayk0z.wav.crypted")) returned 1
	[0119.158] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0119.158] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0119.158] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.172] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.172] GetLastError () returned 0x3e5
	[0119.172] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.173] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=5280 | out: Addend=0xe0dabc) returned 6967872
	[0119.173] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.173] GetLastError () returned 0x3e5
	[0119.173] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.173] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0119.173] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0119.173] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0119.173] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=5280) returned 1
	[0119.173] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.173] GetLastError () returned 0x3e5
	[0119.173] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.173] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.190] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=75041 | out: Addend=0xe0dacc) returned 6973099
	[0119.192] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x12530, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.192] GetLastError () returned 0x3e5
	[0119.192] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0119.192] GetLastError () returned 0x26
	[0119.192] GetLastError () returned 0x26
	[0119.192] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.192] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.193] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0119.193] CancelIo (hFile=0x38c) returned 1
	[0119.193] CloseHandle (hObject=0x38c) returned 1
	[0119.196] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0119.196] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0119.196] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.197] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0119.197] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\2byfYz2uPKKvbZg3U4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\2byfyz2upkkvbzg3u4.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\2byfYz2uPKKvbZg3U4.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\2byfyz2upkkvbzg3u4.mp3.crypted")) returned 1
	[0119.198] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0119.198] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0119.198] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.215] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7048208
	[0119.215] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.240] GetLastError () returned 0x3e5
	[0119.240] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.251] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7539728
	[0119.251] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.251] GetLastError () returned 0x3e5
	[0119.251] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.257] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8031248
	[0119.257] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.283] GetLastError () returned 0x3e5
	[0119.283] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.294] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8522768
	[0119.294] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.295] GetLastError () returned 0x3e5
	[0119.295] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.304] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9014288
	[0119.304] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.304] GetLastError () returned 0x3e5
	[0119.304] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.313] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9505808
	[0119.313] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.340] GetLastError () returned 0x3e5
	[0119.340] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.351] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9997328
	[0119.351] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.352] GetLastError () returned 0x3e5
	[0119.352] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.361] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10488848
	[0119.361] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.383] GetLastError () returned 0x3e5
	[0119.383] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.393] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10980368
	[0119.393] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0119.393] GetLastError () returned 0x3e5
	[0119.393] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.404] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=35842 | out: Addend=0xe0dacc) returned 11471820
	[0119.404] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x8c10, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.405] GetLastError () returned 0x3e5
	[0119.405] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0119.405] GetLastError () returned 0x26
	[0119.405] GetLastError () returned 0x26
	[0119.405] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.405] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.406] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0119.407] CancelIo (hFile=0x38c) returned 1
	[0119.407] CloseHandle (hObject=0x38c) returned 1
	[0119.408] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0119.409] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0119.409] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.409] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0119.409] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\OdqPcGho.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\odqpcgho.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\OdqPcGho.m4a.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\odqpcgho.m4a.crypted")) returned 1
	[0119.411] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0119.411] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0119.411] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.428] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.428] GetLastError () returned 0x3e5
	[0119.429] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.430] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=67152 | out: Addend=0xe0dabc) returned 11507744
	[0119.431] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.431] GetLastError () returned 0x3e5
	[0119.431] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.431] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0119.431] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0119.431] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0119.431] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=67152) returned 1
	[0119.432] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.432] GetLastError () returned 0x3e5
	[0119.432] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.432] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.456] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=18034 | out: Addend=0xe0dacc) returned 11574812
	[0119.457] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x4680, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.457] GetLastError () returned 0x3e5
	[0119.457] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0119.457] GetLastError () returned 0x26
	[0119.457] GetLastError () returned 0x26
	[0119.457] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.457] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.458] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0119.458] CancelIo (hFile=0x3e0) returned 1
	[0119.458] CloseHandle (hObject=0x3e0) returned 1
	[0119.461] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.461] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0119.461] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.461] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0119.461] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\m1 mEnSp52t.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\m1 mensp52t.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\m1 mEnSp52t.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\m1 mensp52t.wav.crypted")) returned 1
	[0119.462] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0119.462] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0119.462] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.777] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.783] GetLastError () returned 0x3e5
	[0119.783] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.803] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.804] GetLastError () returned 0x3e5
	[0119.804] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.805] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=31056 | out: Addend=0xe0dabc) returned 2960448
	[0119.805] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.805] GetLastError () returned 0x3e5
	[0119.805] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.805] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0119.805] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0119.806] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0119.806] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=31056) returned 1
	[0119.806] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.806] GetLastError () returned 0x3e5
	[0119.806] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0119.806] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.828] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=30745 | out: Addend=0xe0dacc) returned 2991483
	[0119.829] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x7820, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.829] GetLastError () returned 0x3e5
	[0119.829] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0119.829] GetLastError () returned 0x26
	[0119.829] GetLastError () returned 0x26
	[0119.829] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.829] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.830] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0119.830] CancelIo (hFile=0x3d8) returned 1
	[0119.830] CloseHandle (hObject=0x3d8) returned 1
	[0119.832] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.832] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0119.832] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.833] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0119.833] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\to BsoN2x7xRb.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\to bson2x7xrb.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\to BsoN2x7xRb.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\to bson2x7xrb.mp3.crypted")) returned 1
	[0119.834] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0119.834] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0119.834] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.860] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=20 | out: Addend=0xe0dacc) returned 3022228
	[0119.860] WriteFile (in: hFile=0x3bc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.861] GetLastError () returned 0x3e5
	[0119.861] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0119.861] GetLastError () returned 0x26
	[0119.861] GetLastError () returned 0x26
	[0119.861] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.861] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.875] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0119.875] CancelIo (hFile=0x3bc) returned 1
	[0119.875] CloseHandle (hObject=0x3bc) returned 1
	[0119.968] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.968] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0119.972] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.979] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0119.979] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini.crypted")) returned 1
	[0119.980] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0119.980] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0119.980] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0119.998] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.999] GetLastError () returned 0x3e5
	[0119.999] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.000] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=36496 | out: Addend=0xe0dabc) returned 3022288
	[0120.000] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0120.000] GetLastError () returned 0x3e5
	[0120.000] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.000] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0120.000] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.001] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.001] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=36496) returned 1
	[0120.001] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.001] GetLastError () returned 0x3e5
	[0120.001] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0120.001] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.023] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=21223 | out: Addend=0xe0dacc) returned 3058729
	[0120.024] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x52f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.024] GetLastError () returned 0x3e5
	[0120.024] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0120.024] GetLastError () returned 0x26
	[0120.024] GetLastError () returned 0x26
	[0120.024] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0120.024] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.025] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0120.025] CancelIo (hFile=0x3d8) returned 1
	[0120.025] CloseHandle (hObject=0x3d8) returned 1
	[0120.028] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0120.028] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.028] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0120.029] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0120.029] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4dww4uo5p.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4dww4uo5p.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4dww4uo5p.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4dww4uo5p.gif.crypted")) returned 1
	[0120.030] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0120.030] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0120.030] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.031] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3079952
	[0120.038] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.040] GetLastError () returned 0x3e5
	[0120.040] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.042] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3571472
	[0120.050] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.051] GetLastError () returned 0x3e5
	[0120.052] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.079] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4062992
	[0120.085] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.087] GetLastError () returned 0x3e5
	[0120.087] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.088] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4554512
	[0120.095] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.097] GetLastError () returned 0x3e5
	[0120.097] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.144] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5046032
	[0120.151] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.154] GetLastError () returned 0x3e5
	[0120.154] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.154] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5537552
	[0120.162] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.164] GetLastError () returned 0x3e5
	[0120.164] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.214] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6029072
	[0120.223] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.226] GetLastError () returned 0x3e5
	[0120.226] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.228] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6520592
	[0120.236] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0120.386] GetLastError () returned 0x3e5
	[0120.386] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.426] ReadFile (in: hFile=0x3dc, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 1
	[0120.426] GetLastError () returned 0x3e5
	[0120.426] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.427] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=14880 | out: Addend=0xe0dabc) returned 7218896
	[0120.427] ReadFile (in: hFile=0x3dc, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 0x0
	[0120.427] GetLastError () returned 0x3e5
	[0120.427] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.428] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0120.428] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.428] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.428] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=14880) returned 1
	[0120.428] WriteFile (in: hFile=0x3dc, lpBuffer=0x4bb0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 1
	[0120.429] GetLastError () returned 0x3e5
	[0120.429] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0120.429] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.451] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=44323 | out: Addend=0xe0dacc) returned 7233671
	[0120.451] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xad30, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.452] GetLastError () returned 0x3e5
	[0120.452] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0120.452] GetLastError () returned 0x26
	[0120.452] GetLastError () returned 0x26
	[0120.452] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0120.452] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.453] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0120.453] CancelIo (hFile=0x3dc) returned 1
	[0120.453] CloseHandle (hObject=0x3dc) returned 1
	[0120.456] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0120.456] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0120.456] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0120.457] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0120.457] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\qEywyL.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\qeywyl.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\qEywyL.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\qeywyl.gif.crypted")) returned 1
	[0120.458] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0120.458] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0120.458] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.479] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0120.479] GetLastError () returned 0x3e5
	[0120.479] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.480] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=13360 | out: Addend=0xe0dabc) returned 7278112
	[0120.480] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0120.480] GetLastError () returned 0x3e5
	[0120.480] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.481] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0120.481] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.481] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.481] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=13360) returned 1
	[0120.481] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.481] GetLastError () returned 0x3e5
	[0120.481] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0120.481] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.504] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=11527 | out: Addend=0xe0dacc) returned 7291340
	[0120.505] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x2d10, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.505] GetLastError () returned 0x3e5
	[0120.505] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0120.505] GetLastError () returned 0x26
	[0120.505] GetLastError () returned 0x26
	[0120.505] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0120.505] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.506] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0120.506] CancelIo (hFile=0x3d8) returned 1
	[0120.506] CloseHandle (hObject=0x3d8) returned 1
	[0120.508] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0120.508] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.508] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0120.509] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0120.509] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DUsFXU.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dusfxu.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DUsFXU.jpg.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dusfxu.jpg.crypted")) returned 1
	[0120.514] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0120.514] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0120.514] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.532] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0120.532] GetLastError () returned 0x3e5
	[0120.532] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.535] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=76048 | out: Addend=0xe0dabc) returned 7303008
	[0120.535] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0120.535] GetLastError () returned 0x3e5
	[0120.535] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.535] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0120.535] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.535] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.535] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=76048) returned 1
	[0120.536] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.536] GetLastError () returned 0x3e5
	[0120.536] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0120.536] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.556] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=38887 | out: Addend=0xe0dacc) returned 7378903
	[0120.557] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x97f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.557] GetLastError () returned 0x3e5
	[0120.557] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0120.558] GetLastError () returned 0x26
	[0120.558] GetLastError () returned 0x26
	[0120.558] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0120.558] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.559] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0120.559] CancelIo (hFile=0x3d8) returned 1
	[0120.559] CloseHandle (hObject=0x3d8) returned 1
	[0120.560] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0120.560] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.561] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0120.561] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0120.561] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IttO.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\itto.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IttO.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\itto.bmp.crypted")) returned 1
	[0120.562] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0120.562] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0120.562] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.579] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0120.580] GetLastError () returned 0x3e5
	[0120.580] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.582] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=94192 | out: Addend=0xe0dabc) returned 7417952
	[0120.582] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0120.582] GetLastError () returned 0x3e5
	[0120.582] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.583] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0120.583] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.583] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.583] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=94192) returned 1
	[0120.583] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.583] GetLastError () returned 0x3e5
	[0120.583] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0120.583] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.620] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8003664
	[0120.620] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.622] GetLastError () returned 0x3e5
	[0120.622] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.630] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8495184
	[0120.630] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.653] GetLastError () returned 0x3e5
	[0120.653] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.665] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0120.665] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.666] GetLastError () returned 0x3e5
	[0120.666] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.674] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0120.674] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.698] GetLastError () returned 0x3e5
	[0120.698] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.708] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0120.708] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.709] GetLastError () returned 0x3e5
	[0120.709] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.716] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474560
	[0120.716] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.743] GetLastError () returned 0x3e5
	[0120.743] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.753] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1966080
	[0120.753] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.755] GetLastError () returned 0x3e5
	[0120.755] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.762] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2457600
	[0120.763] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.794] GetLastError () returned 0x3e5
	[0120.795] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.805] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2949120
	[0120.805] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.806] GetLastError () returned 0x3e5
	[0120.806] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.812] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3440640
	[0120.812] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.813] GetLastError () returned 0x3e5
	[0120.813] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0120.820] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3932160
	[0120.820] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0121.237] GetLastError () returned 0x3e5
	[0121.237] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.359] ReadFile (in: hFile=0x37c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0121.360] GetLastError () returned 0x3e5
	[0121.360] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.365] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=14351 | out: Addend=0xe0dacc) returned 5146817
	[0121.365] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x3810, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0121.365] GetLastError () returned 0x3e5
	[0121.365] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.370] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=38512 | out: Addend=0xe0dabc) returned 5652720
	[0121.370] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0121.370] GetLastError () returned 0x3e5
	[0121.370] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0121.372] GetLastError () returned 0x26
	[0121.372] GetLastError () returned 0x26
	[0121.372] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4ab0020) returned 1
	[0121.372] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.375] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x6726b8
	[0121.375] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0121.375] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0121.376] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=12144) returned 1
	[0121.376] WriteFile (in: hFile=0x3c4, lpBuffer=0x4bb0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 1
	[0121.376] GetLastError () returned 0x3e5
	[0121.376] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6726b8 | out: hHeap=0x5f0000) returned 1
	[0121.376] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.402] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0121.402] CancelIo (hFile=0x378) returned 1
	[0121.402] CloseHandle (hObject=0x378) returned 1
	[0121.409] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6721a8 | out: hHeap=0x5f0000) returned 1
	[0121.409] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0121.409] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4cb0020 | out: hHeap=0x5f0000) returned 1
	[0121.410] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0121.410] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\1gxQ0.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\1gxq0.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\1gxQ0.jpg.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\1gxq0.jpg.crypted")) returned 1
	[0121.411] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0121.411] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0121.411] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.414] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5367266
	[0121.420] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.423] GetLastError () returned 0x3e5
	[0121.423] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.425] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5858786
	[0121.431] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.432] GetLastError () returned 0x3e5
	[0121.432] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.455] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6350306
	[0121.460] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.463] GetLastError () returned 0x3e5
	[0121.463] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.465] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6841826
	[0121.471] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.472] GetLastError () returned 0x3e5
	[0121.472] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.495] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7333346
	[0121.501] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.503] GetLastError () returned 0x3e5
	[0121.503] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.504] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7824866
	[0121.510] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.511] GetLastError () returned 0x3e5
	[0121.511] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.533] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8316386
	[0121.539] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.542] GetLastError () returned 0x3e5
	[0121.542] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.544] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8807906
	[0121.549] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.551] GetLastError () returned 0x3e5
	[0121.551] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.568] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9299426
	[0121.575] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.579] GetLastError () returned 0x3e5
	[0121.579] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.581] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9790946
	[0121.586] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.588] GetLastError () returned 0x3e5
	[0121.588] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.789] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0121.821] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0121.878] GetLastError () returned 0x3e5
	[0121.879] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.899] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2004232
	[0121.907] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.908] GetLastError () returned 0x3e5
	[0121.908] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.967] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2495752
	[0121.974] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.976] GetLastError () returned 0x3e5
	[0121.976] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.977] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2987272
	[0121.983] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.985] GetLastError () returned 0x3e5
	[0121.985] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0121.998] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3478792
	[0122.005] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.008] GetLastError () returned 0x3e5
	[0122.008] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.011] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=248 | out: Addend=0xe0dacc) returned 3970312
	[0122.011] WriteFile (in: hFile=0x3d8, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0122.027] GetLastError () returned 0x3e5
	[0122.027] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0122.027] GetLastError () returned 0x26
	[0122.027] GetLastError () returned 0x26
	[0122.027] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0122.027] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.029] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0122.029] CancelIo (hFile=0x3d8) returned 1
	[0122.029] CloseHandle (hObject=0x3d8) returned 1
	[0122.045] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0122.045] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0122.045] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0122.046] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0122.046] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms.crypted")) returned 1
	[0122.049] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0122.049] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0122.049] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.067] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=256 | out: Addend=0xe0dabc) returned 3970576
	[0122.067] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0122.067] GetLastError () returned 0x3e5
	[0122.067] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.067] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0122.067] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0122.068] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0122.068] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=256) returned 1
	[0122.068] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.068] GetLastError () returned 0x3e5
	[0122.068] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0122.068] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.100] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=39551 | out: Addend=0xe0dacc) returned 3970808
	[0122.101] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x9a80, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.101] GetLastError () returned 0x3e5
	[0122.101] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0122.102] GetLastError () returned 0x26
	[0122.102] GetLastError () returned 0x26
	[0122.102] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0122.102] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.103] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0122.103] CancelIo (hFile=0x3d8) returned 1
	[0122.103] CloseHandle (hObject=0x3d8) returned 1
	[0122.105] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.105] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0122.105] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0122.106] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0122.106] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\9G71itxwqF7N-a3T.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\9g71itxwqf7n-a3t.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\9G71itxwqF7N-a3T.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\9g71itxwqf7n-a3t.mp4.crypted")) returned 1
	[0122.107] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0122.107] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0122.107] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.129] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0122.130] GetLastError () returned 0x3e5
	[0122.130] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.132] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=99200 | out: Addend=0xe0dabc) returned 4010384
	[0122.132] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0122.132] GetLastError () returned 0x3e5
	[0122.132] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.133] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0122.133] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0122.133] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0122.133] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=99200) returned 1
	[0122.133] WriteFile (in: hFile=0x3f8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.133] GetLastError () returned 0x3e5
	[0122.133] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0122.133] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.179] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=98906 | out: Addend=0xe0dacc) returned 4109544
	[0122.180] WriteFile (in: hFile=0x3f8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x18260, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.181] GetLastError () returned 0x3e5
	[0122.181] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0122.181] GetLastError () returned 0x26
	[0122.181] GetLastError () returned 0x26
	[0122.181] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0122.181] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.182] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0122.182] CancelIo (hFile=0x3f8) returned 1
	[0122.182] CloseHandle (hObject=0x3f8) returned 1
	[0122.184] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.184] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0122.184] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0122.187] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0122.187] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\dJsEYftG92zAtaz.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\djseyftg92zataz.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\dJsEYftG92zAtaz.flv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\djseyftg92zataz.flv.crypted")) returned 1
	[0122.188] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0122.188] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0122.188] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.203] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4208450
	[0122.208] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.210] GetLastError () returned 0x3e5
	[0122.210] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.358] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0122.358] GetLastError () returned 0x3e5
	[0122.358] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.361] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=82248 | out: Addend=0xe0dacc) returned 4701971
	[0122.362] WriteFile (in: hFile=0x3ec, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x14150, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0122.362] GetLastError () returned 0x3e5
	[0122.362] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.364] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=48624 | out: Addend=0xe0dabc) returned 4784288
	[0122.365] ReadFile (in: hFile=0x38c, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 0x0
	[0122.365] GetLastError () returned 0x3e5
	[0122.365] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.366] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4045560
	[0122.366] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045970
	[0122.366] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045970 | out: hHeap=0x5f0000) returned 1
	[0122.366] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=2016) returned 1
	[0122.366] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0122.366] GetLastError () returned 0x3e5
	[0122.366] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045560 | out: hHeap=0x5f0000) returned 1
	[0122.366] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.374] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0122.374] CancelIo (hFile=0x3ec) returned 1
	[0122.374] CloseHandle (hObject=0x3ec) returned 1
	[0122.382] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0122.382] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0122.382] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4ab0020 | out: hHeap=0x5f0000) returned 1
	[0122.382] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0122.383] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\RenWTuGab6Fc7qSbS\\a8AwJr7e8zC83.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\renwtugab6fc7qsbs\\a8awjr7e8zc83.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\RenWTuGab6Fc7qSbS\\a8AwJr7e8zC83.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\renwtugab6fc7qsbs\\a8awjr7e8zc83.mp4.crypted")) returned 1
	[0122.384] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0122.384] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0122.384] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.406] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=74736 | out: Addend=0xe0dabc) returned 4832912
	[0122.407] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0122.407] GetLastError () returned 0x3e5
	[0122.407] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.407] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0122.407] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0122.407] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0122.407] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=74736) returned 1
	[0122.407] WriteFile (in: hFile=0x3f8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.408] GetLastError () returned 0x3e5
	[0122.408] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0122.408] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.816] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=17136 | out: Addend=0xe0dabc) returned 10461824
	[0122.816] ReadFile (in: hFile=0x3b8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0122.816] GetLastError () returned 0x3e5
	[0122.816] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.817] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0122.817] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3519ac0
	[0122.817] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3519ac0 | out: hHeap=0x5f0000) returned 1
	[0122.817] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=17136) returned 1
	[0122.817] WriteFile (in: hFile=0x3b8, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0122.817] GetLastError () returned 0x3e5
	[0122.818] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0122.818] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.849] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=50672 | out: Addend=0xe0dabc) returned 0
	[0122.849] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0122.849] GetLastError () returned 0x3e5
	[0122.850] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0122.850] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0122.850] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3519ac0
	[0122.850] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3519ac0 | out: hHeap=0x5f0000) returned 1
	[0122.850] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=50672) returned 1
	[0122.850] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0122.850] GetLastError () returned 0x3e5
	[0122.850] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0122.850] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.241] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=82811 | out: Addend=0xe0dacc) returned 3226829
	[0123.242] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x14380, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.305] GetLastError () returned 0x3e5
	[0123.305] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.305] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=82816 | out: Addend=0xe0dabc) returned 3226944
	[0123.305] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0123.305] GetLastError () returned 0x3e5
	[0123.305] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0123.306] GetLastError () returned 0x26
	[0123.306] GetLastError () returned 0x26
	[0123.306] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0123.306] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.306] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351b4e8
	[0123.306] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0123.306] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0123.306] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=82816) returned 1
	[0123.306] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.306] GetLastError () returned 0x3e5
	[0123.306] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351b4e8 | out: hHeap=0x5f0000) returned 1
	[0123.306] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.306] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351b4e8
	[0123.306] CancelIo (hFile=0x38c) returned 1
	[0123.307] CloseHandle (hObject=0x38c) returned 1
	[0123.323] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0123.323] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672be0 | out: hHeap=0x5f0000) returned 1
	[0123.323] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0123.324] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x351d108
	[0123.324] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\DhBkHbv tGKoCn7s.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\dhbkhbv tgkocn7s.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\DhBkHbv tGKoCn7s.swf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\dhbkhbv tgkocn7s.swf.crypted")) returned 1
	[0123.335] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d108 | out: hHeap=0x5f0000) returned 1
	[0123.335] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351b4e8 | out: hHeap=0x5f0000) returned 1
	[0123.335] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.363] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=49730 | out: Addend=0xe0dacc) returned 3441019
	[0123.364] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xc250, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.364] GetLastError () returned 0x3e5
	[0123.364] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0123.365] GetLastError () returned 0x26
	[0123.365] GetLastError () returned 0x26
	[0123.365] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.365] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.366] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0123.366] CancelIo (hFile=0x3e0) returned 1
	[0123.366] CloseHandle (hObject=0x3e0) returned 1
	[0123.368] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351b4e8 | out: hHeap=0x5f0000) returned 1
	[0123.368] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0123.368] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.369] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0123.369] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\XnDn.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\xndn.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\XnDn.avi.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\xndn.avi.crypted")) returned 1
	[0123.370] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0123.370] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0123.370] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.390] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0123.391] GetLastError () returned 0x3e5
	[0123.391] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.393] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=87376 | out: Addend=0xe0dabc) returned 3490896
	[0123.393] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.393] GetLastError () returned 0x3e5
	[0123.393] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.394] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0123.394] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x3519ac0
	[0123.394] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3519ac0 | out: hHeap=0x5f0000) returned 1
	[0123.394] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=87376) returned 1
	[0123.394] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.394] GetLastError () returned 0x3e5
	[0123.394] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.394] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.419] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=22684 | out: Addend=0xe0dacc) returned 3578119
	[0123.419] WriteFile (in: hFile=0x3ec, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x58a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.419] GetLastError () returned 0x3e5
	[0123.419] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0123.420] GetLastError () returned 0x26
	[0123.420] GetLastError () returned 0x26
	[0123.420] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.420] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.421] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40402b8
	[0123.421] CancelIo (hFile=0x3ec) returned 1
	[0123.421] CloseHandle (hObject=0x3ec) returned 1
	[0123.422] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351aac8 | out: hHeap=0x5f0000) returned 1
	[0123.422] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0123.422] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.423] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0123.423] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\5ivn6VXEvHX0K7b.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\5ivn6vxevhx0k7b.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\5ivn6VXEvHX0K7b.avi.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\5ivn6vxevhx0k7b.avi.crypted")) returned 1
	[0123.424] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0123.424] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40402b8 | out: hHeap=0x5f0000) returned 1
	[0123.424] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.425] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351aed8
	[0123.425] CancelIo (hFile=0x378) returned 1
	[0123.425] CloseHandle (hObject=0x378) returned 1
	[0123.426] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351afd8 | out: hHeap=0x5f0000) returned 1
	[0123.426] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffc0 | out: hHeap=0x5f0000) returned 1
	[0123.426] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4bb0020 | out: hHeap=0x5f0000) returned 1
	[0123.427] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x351ffa8
	[0123.427] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\ssuKoHkWRjOccPH1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\ssukohkwrjoccph1.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\ssuKoHkWRjOccPH1.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\ssukohkwrjoccph1.mp4.crypted")) returned 1
	[0123.428] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffa8 | out: hHeap=0x5f0000) returned 1
	[0123.428] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351aed8 | out: hHeap=0x5f0000) returned 1
	[0123.428] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.463] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0123.464] GetLastError () returned 0x3e5
	[0123.464] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.465] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=44960 | out: Addend=0xe0dabc) returned 3600960
	[0123.466] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0123.466] GetLastError () returned 0x3e5
	[0123.466] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.466] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0123.466] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0123.466] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0123.467] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=44960) returned 1
	[0123.467] WriteFile (in: hFile=0x3ec, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.467] GetLastError () returned 0x3e5
	[0123.467] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0123.467] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.544] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=42129 | out: Addend=0xe0dacc) returned 4628803
	[0123.545] WriteFile (in: hFile=0x3ec, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0xa4a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.545] GetLastError () returned 0x3e5
	[0123.545] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0123.545] GetLastError () returned 0x26
	[0123.545] GetLastError () returned 0x26
	[0123.545] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0123.545] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.546] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0123.546] CancelIo (hFile=0x3ec) returned 1
	[0123.546] CloseHandle (hObject=0x3ec) returned 1
	[0123.549] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0123.549] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40402b8 | out: hHeap=0x5f0000) returned 1
	[0123.549] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0123.550] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0123.550] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\tQP3AdhgtIEyFdgGovq.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\tqp3adhgtieyfdggovq.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\tQP3AdhgtIEyFdgGovq.flv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\tqp3adhgtieyfdggovq.flv.crypted")) returned 1
	[0123.551] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0123.551] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0123.551] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.563] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4670932
	[0123.569] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.571] GetLastError () returned 0x3e5
	[0123.571] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.585] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5162452
	[0123.591] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.595] GetLastError () returned 0x3e5
	[0123.595] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.619] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0123.620] GetLastError () returned 0x3e5
	[0123.620] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.623] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=95168 | out: Addend=0xe0dabc) returned 5654144
	[0123.623] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0123.623] GetLastError () returned 0x3e5
	[0123.623] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.623] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0123.623] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0123.624] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0123.624] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=95168) returned 1
	[0123.624] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.624] GetLastError () returned 0x3e5
	[0123.624] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0123.624] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.729] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=53702 | out: Addend=0xe0dacc) returned 7223695
	[0123.730] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0xd1d0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.730] GetLastError () returned 0x3e5
	[0123.730] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0123.730] GetLastError () returned 0x26
	[0123.730] GetLastError () returned 0x26
	[0123.730] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0123.730] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0123.731] CancelIo (hFile=0x3e0) returned 1
	[0123.732] CloseHandle (hObject=0x3e0) returned 1
	[0123.734] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0123.734] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0123.734] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0123.734] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.734] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\Pmu0Y.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\pmu0y.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\Pmu0Y.flv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\pmu0y.flv.crypted")) returned 1
	[0123.735] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.735] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0123.735] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.736] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=82362 | out: Addend=0xe0dacc) returned 7277397
	[0123.738] WriteFile (in: hFile=0x378, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x141c0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.738] GetLastError () returned 0x3e5
	[0123.738] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0123.738] GetLastError () returned 0x26
	[0123.739] GetLastError () returned 0x26
	[0123.739] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.739] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.739] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.739] CancelIo (hFile=0x378) returned 1
	[0123.739] CloseHandle (hObject=0x378) returned 1
	[0123.741] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.741] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0123.741] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.742] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0123.742] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\RG7Nc.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\rg7nc.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\RG7Nc.avi.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\rg7nc.avi.crypted")) returned 1
	[0123.743] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0123.743] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.743] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.779] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0123.779] GetLastError () returned 0x3e5
	[0123.779] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.782] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=98944 | out: Addend=0xe0dabc) returned 7359952
	[0123.782] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0123.782] GetLastError () returned 0x3e5
	[0123.782] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.782] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0123.782] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0123.783] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0123.783] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=98944) returned 1
	[0123.783] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.783] GetLastError () returned 0x3e5
	[0123.783] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0123.783] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.813] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=32532 | out: Addend=0xe0dacc) returned 7458702
	[0123.813] WriteFile (in: hFile=0x3dc, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x7f20, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.813] GetLastError () returned 0x3e5
	[0123.814] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0123.814] GetLastError () returned 0x26
	[0123.814] GetLastError () returned 0x26
	[0123.814] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0123.814] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.815] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0123.815] CancelIo (hFile=0x3dc) returned 1
	[0123.815] CloseHandle (hObject=0x3dc) returned 1
	[0123.818] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0123.818] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0123.818] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0123.818] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0123.818] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\BSnV-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\bsnv-.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\BSnV-.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\bsnv-.mp4.crypted")) returned 1
	[0123.819] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0123.819] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0123.819] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.822] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=66572 | out: Addend=0xe0dacc) returned 7491234
	[0123.823] WriteFile (in: hFile=0x378, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x10410, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.824] GetLastError () returned 0x3e5
	[0123.824] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0123.824] GetLastError () returned 0x26
	[0123.824] GetLastError () returned 0x26
	[0123.824] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.825] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.825] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0123.825] CancelIo (hFile=0x378) returned 1
	[0123.826] CloseHandle (hObject=0x378) returned 1
	[0123.828] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.828] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0123.828] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.829] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0123.829] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\RHfYAp4iFTI.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\rhfyap4ifti.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\RHfYAp4iFTI.mkv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\rhfyap4ifti.mkv.crypted")) returned 1
	[0123.830] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0123.831] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0123.831] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.873] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=68382 | out: Addend=0xe0dacc) returned 0
	[0123.874] WriteFile (in: hFile=0x3bc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x10b20, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.874] GetLastError () returned 0x3e5
	[0123.874] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0123.875] GetLastError () returned 0x26
	[0123.875] GetLastError () returned 0x26
	[0123.875] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0123.875] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.876] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0123.876] CancelIo (hFile=0x3bc) returned 1
	[0123.876] CloseHandle (hObject=0x3bc) returned 1
	[0123.876] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0123.876] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0123.876] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0123.877] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0123.877] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), lpNewFileName="C:\\\\Users\\Default\\Contacts\\Administrator.contact.crypted" (normalized: "c:\\users\\default\\contacts\\administrator.contact.crypted")) returned 1
	[0123.878] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0123.878] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0123.878] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.894] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 559902
	[0123.901] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.903] GetLastError () returned 0x3e5
	[0123.903] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.906] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1051422
	[0123.913] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.914] GetLastError () returned 0x3e5
	[0123.914] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.957] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1542942
	[0123.964] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.966] GetLastError () returned 0x3e5
	[0123.966] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0123.968] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2034462
	[0123.975] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.977] GetLastError () returned 0x3e5
	[0123.977] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.001] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2525982
	[0124.008] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.010] GetLastError () returned 0x3e5
	[0124.010] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.012] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3017502
	[0124.019] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.021] GetLastError () returned 0x3e5
	[0124.021] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.045] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3509022
	[0124.052] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.055] GetLastError () returned 0x3e5
	[0124.055] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.058] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4000542
	[0124.066] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.067] GetLastError () returned 0x3e5
	[0124.067] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.092] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4492062
	[0124.100] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.102] GetLastError () returned 0x3e5
	[0124.102] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.105] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4983582
	[0124.112] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.114] GetLastError () returned 0x3e5
	[0124.114] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.139] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5475102
	[0124.146] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0124.149] GetLastError () returned 0x3e5
	[0124.149] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.222] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0124.222] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0124.223] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0124.223] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=240) returned 1
	[0124.223] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0124.223] GetLastError () returned 0x3e5
	[0124.223] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0124.223] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0124.262] GetLastError () returned 0x26
	[0124.262] GetLastError () returned 0x26
	[0124.262] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0124.262] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.263] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0124.263] CancelIo (hFile=0x378) returned 1
	[0124.263] CloseHandle (hObject=0x378) returned 1
	[0124.263] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0124.263] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0124.263] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0124.264] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0124.264] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url.crypted" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url.crypted")) returned 1
	[0124.265] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0124.265] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0124.265] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.377] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5967008
	[0124.378] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.420] GetLastError () returned 0x3e5
	[0124.420] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.430] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6458528
	[0124.430] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.432] GetLastError () returned 0x3e5
	[0124.432] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.441] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6950048
	[0124.441] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0124.729] GetLastError () returned 0x3e5
	[0124.729] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.838] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 11865354
	[0124.838] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0124.839] GetLastError () returned 0x3e5
	[0124.839] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0124.839] GetLastError () returned 0x26
	[0124.839] GetLastError () returned 0x26
	[0124.839] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0124.840] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.841] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0124.841] CancelIo (hFile=0x3d8) returned 1
	[0124.841] CloseHandle (hObject=0x3d8) returned 1
	[0124.841] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0124.841] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0124.841] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0124.842] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0124.842] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url.crypted" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url.crypted")) returned 1
	[0124.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0124.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0124.843] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.866] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 0
	[0124.866] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0124.866] GetLastError () returned 0x3e5
	[0124.866] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0124.866] GetLastError () returned 0x26
	[0124.866] GetLastError () returned 0x26
	[0124.866] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0124.866] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.868] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0124.868] CancelIo (hFile=0x3d8) returned 1
	[0124.868] CloseHandle (hObject=0x3d8) returned 1
	[0124.868] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0124.868] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0124.868] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0124.868] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0124.869] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url.crypted" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url.crypted")) returned 1
	[0124.869] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0124.869] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0124.869] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.890] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=134 | out: Addend=0xe0dacc) returned 133
	[0124.890] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0124.890] GetLastError () returned 0x3e5
	[0124.890] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0124.891] GetLastError () returned 0x26
	[0124.891] GetLastError () returned 0x26
	[0124.891] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0124.891] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.892] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0124.892] CancelIo (hFile=0x3d8) returned 1
	[0124.892] CloseHandle (hObject=0x3d8) returned 1
	[0124.892] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0124.892] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0124.892] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0124.893] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0124.893] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url.crypted" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url.crypted")) returned 1
	[0124.894] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0124.894] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0124.894] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.917] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 288
	[0124.917] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.919] GetLastError () returned 0x3e5
	[0124.919] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.929] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491808
	[0124.929] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.971] GetLastError () returned 0x3e5
	[0124.971] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.981] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983328
	[0124.982] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.983] GetLastError () returned 0x3e5
	[0124.984] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0124.993] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474848
	[0124.994] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.022] GetLastError () returned 0x3e5
	[0125.022] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.073] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1966512
	[0125.073] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0125.166] GetLastError () returned 0x3e5
	[0125.166] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.171] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 3932560
	[0125.171] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.172] GetLastError () returned 0x3e5
	[0125.172] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0125.172] GetLastError () returned 0x26
	[0125.172] GetLastError () returned 0x26
	[0125.172] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0125.173] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.174] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0125.174] CancelIo (hFile=0x3d8) returned 1
	[0125.174] CloseHandle (hObject=0x3d8) returned 1
	[0125.174] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0125.174] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0125.174] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0125.175] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0125.175] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url.crypted" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url.crypted")) returned 1
	[0125.176] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0125.176] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0125.176] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.273] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 3932693
	[0125.273] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.273] GetLastError () returned 0x3e5
	[0125.273] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0125.273] GetLastError () returned 0x26
	[0125.273] GetLastError () returned 0x26
	[0125.273] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0125.273] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.274] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0125.275] CancelIo (hFile=0x3d8) returned 1
	[0125.275] CloseHandle (hObject=0x3d8) returned 1
	[0125.275] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0125.275] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0125.275] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0125.276] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0125.276] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url.crypted" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url.crypted")) returned 1
	[0125.277] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0125.277] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0125.277] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.295] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3932826
	[0125.302] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.306] GetLastError () returned 0x3e5
	[0125.306] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.308] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4424346
	[0125.316] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.318] GetLastError () returned 0x3e5
	[0125.318] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.319] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4915866
	[0125.327] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.329] GetLastError () returned 0x3e5
	[0125.329] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.360] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5407386
	[0125.368] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.371] GetLastError () returned 0x3e5
	[0125.371] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.374] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5898906
	[0125.381] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.383] GetLastError () returned 0x3e5
	[0125.383] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.407] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6390426
	[0125.415] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.418] GetLastError () returned 0x3e5
	[0125.418] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.419] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6881946
	[0125.427] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.429] GetLastError () returned 0x3e5
	[0125.429] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.456] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7373466
	[0125.464] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.466] GetLastError () returned 0x3e5
	[0125.466] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.468] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7864986
	[0125.475] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.477] GetLastError () returned 0x3e5
	[0125.477] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.503] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8356506
	[0125.510] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0125.513] GetLastError () returned 0x3e5
	[0125.513] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.519] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 8356560
	[0125.519] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0125.519] GetLastError () returned 0x3e5
	[0125.519] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.519] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0125.519] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0125.520] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0125.520] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=144) returned 1
	[0125.520] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.520] GetLastError () returned 0x3e5
	[0125.520] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0125.520] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.537] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8848224
	[0125.537] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.562] GetLastError () returned 0x3e5
	[0125.562] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.572] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9339744
	[0125.572] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.574] GetLastError () returned 0x3e5
	[0125.574] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.583] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9831264
	[0125.583] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.821] GetLastError () returned 0x3e5
	[0125.821] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.822] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 14255012
	[0125.822] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.822] GetLastError () returned 0x3e5
	[0125.822] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0125.823] GetLastError () returned 0x26
	[0125.823] GetLastError () returned 0x26
	[0125.823] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0125.823] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.824] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0125.824] CancelIo (hFile=0x3d8) returned 1
	[0125.824] CloseHandle (hObject=0x3d8) returned 1
	[0125.825] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0125.825] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0125.825] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0125.825] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0125.825] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url.crypted" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url.crypted")) returned 1
	[0125.826] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0125.827] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0125.827] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0125.843] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 13763712
	[0125.844] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0126.112] GetLastError () returned 0x3e5
	[0126.112] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.142] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=894 | out: Addend=0xe0dacc) returned 1474560
	[0126.142] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0x0
	[0126.142] GetLastError () returned 0x3e5
	[0126.142] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.203] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=363 | out: Addend=0xe0dacc) returned 1475454
	[0126.203] WriteFile (in: hFile=0x3d8, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0126.204] GetLastError () returned 0x3e5
	[0126.204] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0126.204] GetLastError () returned 0x26
	[0126.204] GetLastError () returned 0x26
	[0126.204] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0126.204] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.206] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.206] CancelIo (hFile=0x3d8) returned 1
	[0126.206] CloseHandle (hObject=0x3d8) returned 1
	[0126.206] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0126.206] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0126.206] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0126.207] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0126.207] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), lpNewFileName="C:\\\\Users\\Default\\Links\\RecentPlaces.lnk.crypted" (normalized: "c:\\users\\default\\links\\recentplaces.lnk.crypted")) returned 1
	[0126.208] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0126.208] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.208] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.209] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1475817
	[0126.218] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.220] GetLastError () returned 0x3e5
	[0126.220] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.249] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=32 | out: Addend=0xe0dabc) returned 1967344
	[0126.249] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0126.249] GetLastError () returned 0x3e5
	[0126.249] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.250] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0126.250] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0126.250] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0126.250] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=32) returned 1
	[0126.250] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.250] GetLastError () returned 0x3e5
	[0126.250] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0126.250] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.295] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=256 | out: Addend=0xe0dabc) returned 1967376
	[0126.295] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0126.295] GetLastError () returned 0x3e5
	[0126.296] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.296] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0126.296] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0126.296] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0126.296] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=256) returned 1
	[0126.296] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.296] GetLastError () returned 0x3e5
	[0126.296] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0126.296] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.314] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=256 | out: Addend=0xe0dabc) returned 1967632
	[0126.314] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0126.314] GetLastError () returned 0x3e5
	[0126.314] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.315] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0126.315] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0126.315] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0126.315] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=256) returned 1
	[0126.315] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.315] GetLastError () returned 0x3e5
	[0126.315] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0126.315] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.350] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=2025 | out: Addend=0xe0dacc) returned 1967853
	[0126.350] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.350] GetLastError () returned 0x3e5
	[0126.350] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0126.351] GetLastError () returned 0x26
	[0126.351] GetLastError () returned 0x26
	[0126.351] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0126.351] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.352] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0126.354] CancelIo (hFile=0x3dc) returned 1
	[0126.354] CloseHandle (hObject=0x3dc) returned 1
	[0126.355] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0126.355] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0126.355] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0126.356] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0126.356] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), lpNewFileName="C:\\\\Users\\Public\\Desktop\\Adobe Reader X.lnk.crypted" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk.crypted")) returned 1
	[0126.357] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0126.357] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0126.357] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.429] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0126.429] GetLastError () returned 0x3e5
	[0126.429] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.431] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=2272 | out: Addend=0xe0dabc) returned 1969920
	[0126.431] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0126.431] GetLastError () returned 0x3e5
	[0126.431] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.431] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0126.431] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0126.432] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0126.432] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=2272) returned 1
	[0126.432] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.432] GetLastError () returned 0x3e5
	[0126.432] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0126.432] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.453] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=1157 | out: Addend=0xe0dacc) returned 1972135
	[0126.453] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.453] GetLastError () returned 0x3e5
	[0126.453] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0126.453] GetLastError () returned 0x26
	[0126.453] GetLastError () returned 0x26
	[0126.453] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0126.453] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.454] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0126.454] CancelIo (hFile=0x3dc) returned 1
	[0126.454] CloseHandle (hObject=0x3dc) returned 1
	[0126.454] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0126.454] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0126.454] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0126.455] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0126.455] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), lpNewFileName="C:\\\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.crypted" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk.crypted")) returned 1
	[0126.456] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0126.456] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0126.456] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.484] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1973292
	[0126.490] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.501] GetLastError () returned 0x3e5
	[0126.501] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.537] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2464812
	[0126.546] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.549] GetLastError () returned 0x3e5
	[0126.549] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.550] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2956332
	[0126.561] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.562] GetLastError () returned 0x3e5
	[0126.563] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.588] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3447852
	[0126.595] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.599] GetLastError () returned 0x3e5
	[0126.599] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.600] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3939372
	[0126.607] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.609] GetLastError () returned 0x3e5
	[0126.609] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.634] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4430892
	[0126.640] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.644] GetLastError () returned 0x3e5
	[0126.644] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.645] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4922412
	[0126.653] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.655] GetLastError () returned 0x3e5
	[0126.655] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.685] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5413932
	[0126.691] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0126.696] GetLastError () returned 0x3e5
	[0126.696] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.741] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=880 | out: Addend=0xe0dabc) returned 5414000
	[0126.741] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0126.741] GetLastError () returned 0x3e5
	[0126.741] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.743] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0126.743] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0126.743] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0126.743] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=880) returned 1
	[0126.743] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.743] GetLastError () returned 0x3e5
	[0126.743] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0126.743] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.872] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6889368
	[0126.880] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0126.882] GetLastError () returned 0x3e5
	[0126.882] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.889] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7380888
	[0126.895] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.897] GetLastError () returned 0x3e5
	[0126.897] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.907] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0126.907] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.930] GetLastError () returned 0x3e5
	[0126.930] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0126.968] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0126.974] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0x0
	[0127.262] GetLastError () returned 0x3e5
	[0127.262] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0127.283] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6389760
	[0127.291] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0127.293] GetLastError () returned 0x3e5
	[0127.293] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0127.308] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6881280
	[0127.315] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0127.504] GetLastError () returned 0x3e5
	[0127.504] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0127.511] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10321920
	[0127.517] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0127.519] GetLastError () returned 0x3e5
	[0127.519] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0127.611] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=418905 | out: Addend=0xe0dacc) returned 11796480
	[0127.618] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x66460, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.619] GetLastError () returned 0x3e5
	[0127.619] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 0
	[0127.620] GetLastError () returned 0x26
	[0127.620] GetLastError () returned 0x26
	[0127.620] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.620] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0127.621] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0127.621] CancelIo (hFile=0x3e0) returned 1
	[0127.621] CloseHandle (hObject=0x3e0) returned 1
	[0127.621] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0127.621] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0127.621] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0127.622] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0127.622] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), lpNewFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.crypted" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3.crypted")) returned 1
	[0127.623] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0127.623] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0127.623] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0127.649] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 12215392
	[0127.649] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0127.656] GetLastError () returned 0x3e5
	[0127.656] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0127.665] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 12706912
	[0127.665] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0127.689] GetLastError () returned 0x3e5
	[0127.689] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0127.699] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 13198432
	[0127.699] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0127.710] GetLastError () returned 0x3e5
	[0127.710] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0127.719] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 13689952
	[0127.719] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0127.743] GetLastError () returned 0x3e5
	[0127.743] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0127.901] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 17622112
	[0127.901] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0127.957] GetLastError () returned 0x3e5
	[0127.957] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0127.963] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0127.969] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.972] GetLastError () returned 0x3e5
	[0127.972] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.004] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0128.011] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0128.012] GetLastError () returned 0x3e5
	[0128.012] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.052] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474560
	[0128.060] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0128.062] GetLastError () returned 0x3e5
	[0128.062] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.125] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1966080
	[0128.131] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0128.134] GetLastError () returned 0x3e5
	[0128.134] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.136] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2457600
	[0128.142] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0128.144] GetLastError () returned 0x3e5
	[0128.144] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.172] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2949120
	[0128.180] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0128.182] GetLastError () returned 0x3e5
	[0128.182] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.402] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=181728 | out: Addend=0xe0dabc) returned 2949120
	[0128.402] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0128.402] GetLastError () returned 0x3e5
	[0128.402] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.403] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0128.403] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0128.403] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0128.403] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x275faa0 | out: lpFileSize=0x275faa0*=4113888) returned 1
	[0128.403] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0128.403] GetLastError () returned 0x3e5
	[0128.403] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0128.403] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.467] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3622368
	[0128.467] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0128.485] GetLastError () returned 0x3e5
	[0128.485] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.496] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4113888
	[0128.496] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0128.498] GetLastError () returned 0x3e5
	[0128.498] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.508] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4605408
	[0128.508] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0128.524] GetLastError () returned 0x3e5
	[0128.524] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.706] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5588448
	[0128.706] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0128.889] GetLastError () returned 0x3e5
	[0128.889] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.906] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9475557
	[0128.913] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0128.916] GetLastError () returned 0x3e5
	[0128.916] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.955] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0128.964] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0128.966] GetLastError () returned 0x3e5
	[0128.966] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0128.999] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0129.325] GetLastError () returned 0x3e5
	[0129.325] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0129.364] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0129.408] GetLastError () returned 0x3e5
	[0129.409] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0129.425] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3587723
	[0129.430] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0129.433] GetLastError () returned 0x3e5
	[0129.433] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0129.433] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3587744
	[0129.433] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0130.175] GetLastError () returned 0x3e5
	[0130.175] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0130.327] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2949120
	[0130.335] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0130.336] GetLastError () returned 0x3e5
	[0130.337] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0130.458] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3440640
	[0130.458] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0130.479] GetLastError () returned 0x3e5
	[0130.479] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0130.494] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3932160
	[0130.494] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0130.495] GetLastError () returned 0x3e5
	[0130.495] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0130.505] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4423680
	[0130.505] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0130.508] GetLastError () returned 0x3e5
	[0130.508] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0130.657] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5406720
	[0130.657] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.140] GetLastError () returned 0x3e5
	[0133.140] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0133.140] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2949120
	[0133.147] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0133.148] GetLastError () returned 0x3e5
	[0133.148] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0133.158] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2457600
	[0133.158] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0133.592] GetLastError () returned 0x3e5
	[0133.592] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0133.595] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 13271040
	[0133.600] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0133.602] GetLastError () returned 0x3e5
	[0133.602] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0133.633] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 12779520
	[0133.633] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.635] GetLastError () returned 0x3e5
	[0133.635] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0133.649] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 13271040
	[0133.649] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.674] GetLastError () returned 0x3e5
	[0133.674] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0133.680] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 13762560
	[0133.680] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.682] GetLastError () returned 0x3e5
	[0133.682] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0133.687] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 14254080
	[0133.687] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.708] GetLastError () returned 0x3e5
	[0133.708] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0133.714] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 14745600
	[0133.714] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.717] GetLastError () returned 0x3e5
	[0133.717] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0133.722] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 15237120
	[0133.723] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.742] GetLastError () returned 0x3e5
	[0133.742] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0133.911] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 18677760
	[0133.911] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0134.081] GetLastError () returned 0x3e5
	[0134.081] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0134.086] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0134.086] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.114] GetLastError () returned 0x3e5
	[0134.114] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0134.125] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0134.125] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.127] GetLastError () returned 0x3e5
	[0134.127] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0134.135] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0134.135] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0134.481] GetLastError () returned 0x3e5
	[0134.481] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0134.974] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8716288
	[0134.975] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.983] GetLastError () returned 0x3e5
	[0134.983] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0135.005] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9207808
	[0135.010] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.013] GetLastError () returned 0x3e5
	[0135.013] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0135.015] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9699328
	[0135.024] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.026] GetLastError () returned 0x3e5
	[0135.026] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0135.070] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0135.077] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0135.079] GetLastError () returned 0x3e5
	[0135.079] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0135.095] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0135.095] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0135.111] GetLastError () returned 0x3e5
	[0135.111] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c) returned 1
	[0135.121] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0135.121] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0135.123] GetLastError () returned 0x3e5
	[0135.123] GetQueuedCompletionStatus (CompletionPort=0xc8, lpNumberOfBytesTransferred=0x275fa18, lpCompletionKey=0x275faac, lpOverlapped=0x275fa0c, dwMilliseconds=0x1388) 

Thread:
	id = 7
	os_tid = 0x788

	[0057.810] GetCurrentThreadId () returned 0x788
	[0057.810] GetCurrentThreadId () returned 0x788
	[0057.810] GetLastError () returned 0x57
	[0057.810] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x364) returned 0x6127f8
	[0057.810] SetLastError (dwErrCode=0x57) 
	[0057.810] GetLastError () returned 0x57
	[0057.810] SetLastError (dwErrCode=0x57) 
	[0057.810] WriteFile (in: hFile=0x7, lpBuffer=0x29fdea8*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x29fdea0, lpOverlapped=0x0 | out: lpBuffer=0x29fdea8*, lpNumberOfBytesWritten=0x29fdea0*=0x49, lpOverlapped=0x0) returned 1
	[0057.811] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0074.933] GetLastError () returned 0x102
	[0074.933] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0080.304] GetLastError () returned 0x102
	[0080.304] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0085.657] GetLastError () returned 0x102
	[0085.657] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0090.795] GetLastError () returned 0x102
	[0090.795] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0095.813] GetLastError () returned 0x102
	[0095.813] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0101.120] GetLastError () returned 0x102
	[0101.120] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0110.604] GetLastError () returned 0x102
	[0110.604] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0111.744] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=22096 | out: Addend=0xe0dabc) returned 5347408
	[0111.744] ReadFile (in: hFile=0x3c8, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0111.744] GetLastError () returned 0x3e5
	[0111.744] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0111.745] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351e500
	[0111.745] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x351e910
	[0111.745] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351e910 | out: hHeap=0x5f0000) returned 1
	[0111.745] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=22096) returned 1
	[0111.745] WriteFile (in: hFile=0x3c8, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0111.745] GetLastError () returned 0x3e5
	[0111.745] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351e500 | out: hHeap=0x5f0000) returned 1
	[0111.745] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0111.774] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5861024
	[0111.774] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.775] GetLastError () returned 0x3e5
	[0111.775] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0111.783] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6352544
	[0111.783] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.811] GetLastError () returned 0x3e5
	[0111.811] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0111.820] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6844064
	[0111.820] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.820] GetLastError () returned 0x3e5
	[0111.820] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0111.828] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7335584
	[0111.828] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.847] GetLastError () returned 0x3e5
	[0111.847] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0111.856] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7827104
	[0111.856] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.856] GetLastError () returned 0x3e5
	[0111.856] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0111.864] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8318624
	[0111.864] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.884] GetLastError () returned 0x3e5
	[0111.884] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0111.893] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8810144
	[0111.893] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.894] GetLastError () returned 0x3e5
	[0111.894] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0111.902] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9301664
	[0111.902] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.916] GetLastError () returned 0x3e5
	[0111.917] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0111.934] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9793184
	[0111.934] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0111.934] GetLastError () returned 0x3e5
	[0111.934] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0111.942] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10284704
	[0111.942] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0111.956] GetLastError () returned 0x3e5
	[0111.956] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0117.179] GetLastError () returned 0x102
	[0117.179] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0117.180] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 4340112
	[0117.180] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.180] GetLastError () returned 0x3e5
	[0117.180] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0117.180] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.180] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.180] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.180] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=144) returned 1
	[0117.181] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.181] GetLastError () returned 0x3e5
	[0117.181] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.181] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0117.203] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.203] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.203] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.203] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=144) returned 1
	[0117.203] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.204] GetLastError () returned 0x3e5
	[0117.204] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.204] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0117.551] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0117.551] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.551] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.552] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=144) returned 1
	[0117.552] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.552] GetLastError () returned 0x3e5
	[0117.552] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0117.552] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0117.599] GetLastError () returned 0x26
	[0117.599] GetLastError () returned 0x26
	[0117.599] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0117.599] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0117.601] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0117.601] CancelIo (hFile=0x3e0) returned 1
	[0117.601] CloseHandle (hObject=0x3e0) returned 1
	[0117.602] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.602] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0117.602] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0117.603] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.603] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk.crypted")) returned 1
	[0117.604] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.604] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0117.604] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0117.606] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=944 | out: Addend=0xe0dabc) returned 496
	[0117.606] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0117.606] GetLastError () returned 0x3e5
	[0117.606] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0117.607] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0117.607] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.607] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.607] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=944) returned 1
	[0117.607] WriteFile (in: hFile=0x3c4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0117.607] GetLastError () returned 0x3e5
	[0117.607] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0117.607] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0117.648] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=368 | out: Addend=0xe0dabc) returned 1440
	[0117.648] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0117.648] GetLastError () returned 0x3e5
	[0117.648] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0117.648] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d730
	[0117.648] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0117.648] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0117.648] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=368) returned 1
	[0117.649] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0117.649] GetLastError () returned 0x3e5
	[0117.649] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d730 | out: hHeap=0x5f0000) returned 1
	[0117.649] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0118.491] ReadFile (in: hFile=0x378, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 1
	[0118.492] GetLastError () returned 0x3e5
	[0118.492] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0118.499] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=56520 | out: Addend=0xe0dacc) returned 9084534
	[0118.500] WriteFile (in: hFile=0x3c4, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0xdcd0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0118.500] GetLastError () returned 0x3e5
	[0118.500] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0118.502] GetLastError () returned 0x26
	[0118.502] GetLastError () returned 0x26
	[0118.502] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0118.502] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0118.504] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0118.504] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4049050
	[0118.505] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4049050 | out: hHeap=0x5f0000) returned 1
	[0118.505] GetFileSizeEx (in: hFile=0x3f4, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=68032) returned 1
	[0118.505] WriteFile (in: hFile=0x3f4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0118.505] GetLastError () returned 0x3e5
	[0118.505] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0118.505] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0118.526] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0118.526] CancelIo (hFile=0x3f8) returned 1
	[0118.526] CloseHandle (hObject=0x3f8) returned 1
	[0118.528] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047a80 | out: hHeap=0x5f0000) returned 1
	[0118.528] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0118.529] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4ab0020 | out: hHeap=0x5f0000) returned 1
	[0118.529] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043320
	[0118.529] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\w eWm28.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\w ewm28.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\w eWm28.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\w ewm28.wav.crypted")) returned 1
	[0118.530] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043320 | out: hHeap=0x5f0000) returned 1
	[0118.530] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0118.530] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0120.348] ReadFile (in: hFile=0x37c, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0120.348] GetLastError () returned 0x3e5
	[0120.348] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0120.355] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=21856 | out: Addend=0xe0dabc) returned 7012176
	[0120.355] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0120.355] GetLastError () returned 0x3e5
	[0120.355] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0120.356] GetLastError () returned 0x26
	[0120.356] GetLastError () returned 0x26
	[0120.356] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0120.356] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0120.358] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4042558
	[0120.358] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.359] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.359] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=19664) returned 1
	[0120.359] WriteFile (in: hFile=0x38c, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0120.359] GetLastError () returned 0x3e5
	[0120.359] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4042558 | out: hHeap=0x5f0000) returned 1
	[0120.359] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0120.383] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0120.383] CancelIo (hFile=0x37c) returned 1
	[0120.383] CloseHandle (hObject=0x37c) returned 1
	[0120.384] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4042048 | out: hHeap=0x5f0000) returned 1
	[0120.384] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0120.384] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4ab0020 | out: hHeap=0x5f0000) returned 1
	[0120.385] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0120.385] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\EtS _h68PSriZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\ets _h68psriz.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\EtS _h68PSriZ.jpg.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\ets _h68psriz.jpg.crypted")) returned 1
	[0120.386] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0120.386] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0120.386] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0120.588] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7512144
	[0120.588] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0120.846] GetLastError () returned 0x3e5
	[0120.846] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0120.940] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0120.941] GetLastError () returned 0x3e5
	[0120.941] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0120.948] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=11488 | out: Addend=0xe0dabc) returned 4423680
	[0120.948] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0120.948] GetLastError () returned 0x3e5
	[0120.949] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0120.950] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0120.950] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.950] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.951] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=11488) returned 1
	[0120.951] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.951] GetLastError () returned 0x3e5
	[0120.951] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0120.951] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0120.982] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=34744 | out: Addend=0xe0dacc) returned 3943635
	[0120.983] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x87c0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.983] GetLastError () returned 0x3e5
	[0120.983] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0120.984] GetLastError () returned 0x26
	[0120.984] GetLastError () returned 0x26
	[0120.984] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0120.984] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0120.985] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0120.985] CancelIo (hFile=0x3d8) returned 1
	[0120.985] CloseHandle (hObject=0x3d8) returned 1
	[0121.050] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0121.050] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0121.050] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0121.056] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0121.056] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\s2CnFc5DPooT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s2cnfc5dpoot.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\s2CnFc5DPooT.png.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s2cnfc5dpoot.png.crypted")) returned 1
	[0121.057] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0121.057] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.057] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.074] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0121.075] GetLastError () returned 0x3e5
	[0121.075] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.076] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=35696 | out: Addend=0xe0dabc) returned 4469920
	[0121.076] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0121.076] GetLastError () returned 0x3e5
	[0121.076] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.076] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0121.076] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0121.077] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0121.077] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=35696) returned 1
	[0121.077] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0121.077] GetLastError () returned 0x3e5
	[0121.077] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0121.077] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.118] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=40394 | out: Addend=0xe0dacc) returned 4014073
	[0121.119] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x9dd0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0121.119] GetLastError () returned 0x3e5
	[0121.119] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0121.119] GetLastError () returned 0x26
	[0121.119] GetLastError () returned 0x26
	[0121.119] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0121.119] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.121] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0121.121] CancelIo (hFile=0x3dc) returned 1
	[0121.121] CloseHandle (hObject=0x3dc) returned 1
	[0121.126] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0121.126] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.126] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0121.127] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0121.127] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\aQmW2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\aqmw2.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\aQmW2.png.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\aqmw2.png.crypted")) returned 1
	[0121.128] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0121.128] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0121.128] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.170] ReadFile (in: hFile=0x37c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0121.170] GetLastError () returned 0x3e5
	[0121.170] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.172] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=50784 | out: Addend=0xe0dabc) returned 4546016
	[0121.172] ReadFile (in: hFile=0x37c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0121.172] GetLastError () returned 0x3e5
	[0121.172] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.172] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0121.172] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0121.172] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0121.173] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=50784) returned 1
	[0121.173] WriteFile (in: hFile=0x37c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0121.173] GetLastError () returned 0x3e5
	[0121.173] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0121.173] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.199] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4596800
	[0121.199] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.201] GetLastError () returned 0x3e5
	[0121.201] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.209] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5088320
	[0121.209] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0121.605] GetLastError () returned 0x3e5
	[0121.605] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.614] ReadFile (in: hFile=0x3f8, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0121.615] GetLastError () returned 0x3e5
	[0121.615] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.643] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=66448 | out: Addend=0xe0dabc) returned 10774048
	[0121.643] ReadFile (in: hFile=0x3f8, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0121.643] GetLastError () returned 0x3e5
	[0121.643] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.643] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0121.644] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0121.644] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0121.644] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=66448) returned 1
	[0121.644] WriteFile (in: hFile=0x3f8, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0121.644] GetLastError () returned 0x3e5
	[0121.644] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0121.644] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.665] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=45697 | out: Addend=0xe0dacc) returned 10348911
	[0121.666] WriteFile (in: hFile=0x3f8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xb290, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0121.666] GetLastError () returned 0x3e5
	[0121.667] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0121.667] GetLastError () returned 0x26
	[0121.667] GetLastError () returned 0x26
	[0121.667] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0121.667] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.668] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0121.668] CancelIo (hFile=0x3f8) returned 1
	[0121.668] CloseHandle (hObject=0x3f8) returned 1
	[0121.669] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0121.669] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0121.669] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0121.670] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0121.670] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\dwvO_oL5wG9f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\dwvo_ol5wg9f.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\dwvO_oL5wG9f.png.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\dwvo_ol5wg9f.png.crypted")) returned 1
	[0121.671] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0121.671] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0121.671] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.686] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0121.686] GetLastError () returned 0x3e5
	[0121.686] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.704] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0121.705] GetLastError () returned 0x3e5
	[0121.705] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.706] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=92032 | out: Addend=0xe0dabc) returned 10886208
	[0121.706] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0121.706] GetLastError () returned 0x3e5
	[0121.706] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.707] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0121.707] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0121.707] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0121.707] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=92032) returned 1
	[0121.707] WriteFile (in: hFile=0x3dc, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0121.707] GetLastError () returned 0x3e5
	[0121.707] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0121.707] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.728] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=89354 | out: Addend=0xe0dacc) returned 10486628
	[0121.729] WriteFile (in: hFile=0x3d8, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x15d10, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0121.729] GetLastError () returned 0x3e5
	[0121.730] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0121.730] GetLastError () returned 0x26
	[0121.730] GetLastError () returned 0x26
	[0121.730] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0121.730] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0121.731] CancelIo (hFile=0x3d8) returned 1
	[0121.731] CloseHandle (hObject=0x3d8) returned 1
	[0121.732] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0121.732] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0121.732] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0121.733] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.733] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ZrKgJJD.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zrkgjjd.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ZrKgJJD.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zrkgjjd.gif.crypted")) returned 1
	[0121.734] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.734] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0121.734] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.748] ReadFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0121.748] GetLastError () returned 0x3e5
	[0121.748] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.749] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=7824 | out: Addend=0xe0dabc) returned 11067600
	[0121.749] ReadFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0121.749] GetLastError () returned 0x3e5
	[0121.749] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.749] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0121.749] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0121.750] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0121.750] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=7824) returned 1
	[0121.750] WriteFile (in: hFile=0x3d8, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0121.750] GetLastError () returned 0x3e5
	[0121.750] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0121.750] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.825] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0121.831] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.833] GetLastError () returned 0x3e5
	[0121.833] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.835] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0121.842] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.844] GetLastError () returned 0x3e5
	[0121.845] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0121.868] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474560
	[0121.875] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.877] GetLastError () returned 0x3e5
	[0121.877] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.027] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=256 | out: Addend=0xe0dabc) returned 3932160
	[0122.027] ReadFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0122.027] GetLastError () returned 0x3e5
	[0122.027] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.027] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0122.028] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0122.028] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0122.028] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=256) returned 1
	[0122.028] WriteFile (in: hFile=0x3d8, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0122.028] GetLastError () returned 0x3e5
	[0122.028] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0122.028] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.030] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=38160 | out: Addend=0xe0dabc) returned 3932416
	[0122.030] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0122.030] GetLastError () returned 0x3e5
	[0122.030] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.031] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0122.031] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0122.031] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0122.031] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=38160) returned 1
	[0122.031] WriteFile (in: hFile=0x3f8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.032] GetLastError () returned 0x3e5
	[0122.043] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0122.043] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.358] ReadFile (in: hFile=0x3ec, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0122.359] GetLastError () returned 0x3e5
	[0122.359] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.362] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=48623 | out: Addend=0xe0dacc) returned 4784219
	[0122.363] WriteFile (in: hFile=0x38c, lpBuffer=0x4bb0054*, nNumberOfBytesToWrite=0xbdf0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 1
	[0122.364] GetLastError () returned 0x3e5
	[0122.364] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0122.365] GetLastError () returned 0x26
	[0122.365] GetLastError () returned 0x26
	[0122.365] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0122.365] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.366] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4045560
	[0122.367] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045970
	[0122.367] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045970 | out: hHeap=0x5f0000) returned 1
	[0122.367] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=82256) returned 1
	[0122.367] WriteFile (in: hFile=0x3ec, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0122.367] GetLastError () returned 0x3e5
	[0122.367] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045560 | out: hHeap=0x5f0000) returned 1
	[0122.367] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.384] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0122.384] CancelIo (hFile=0x38c) returned 1
	[0122.384] CloseHandle (hObject=0x38c) returned 1
	[0122.401] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0122.401] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0122.401] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4bb0020 | out: hHeap=0x5f0000) returned 1
	[0122.402] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0122.402] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\RenWTuGab6Fc7qSbS\\cRE4.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\renwtugab6fc7qsbs\\cre4.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\RenWTuGab6Fc7qSbS\\cRE4.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\renwtugab6fc7qsbs\\cre4.mp4.crypted")) returned 1
	[0122.403] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0122.403] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0122.403] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.404] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=74725 | out: Addend=0xe0dacc) returned 4832842
	[0122.406] WriteFile (in: hFile=0x3f8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x123f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.406] GetLastError () returned 0x3e5
	[0122.406] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0122.407] GetLastError () returned 0x26
	[0122.407] GetLastError () returned 0x26
	[0122.407] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0122.407] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.408] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0122.408] CancelIo (hFile=0x3f8) returned 1
	[0122.408] CloseHandle (hObject=0x3f8) returned 1
	[0122.410] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.410] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0122.410] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0122.410] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0122.410] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\D_Y_mWn1p8ipYfjXHpn_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\d_y_mwn1p8ipyfjxhpn_.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\D_Y_mWn1p8ipYfjXHpn_.mkv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\d_y_mwn1p8ipyfjxhpn_.mkv.crypted")) returned 1
	[0122.411] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0122.411] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0122.411] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0122.718] GetLastError () returned 0x26
	[0122.718] GetLastError () returned 0x26
	[0122.718] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4cb0020) returned 1
	[0122.718] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.719] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0122.719] CancelIo (hFile=0x37c) returned 1
	[0122.719] CloseHandle (hObject=0x37c) returned 1
	[0122.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0122.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0122.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4cb0020 | out: hHeap=0x5f0000) returned 1
	[0122.729] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0122.729] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\RenWTuGab6Fc7qSbS\\JsWHJF1ceXN-F7HB5.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\renwtugab6fc7qsbs\\jswhjf1cexn-f7hb5.mp4"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\RenWTuGab6Fc7qSbS\\JsWHJF1ceXN-F7HB5.mp4.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\renwtugab6fc7qsbs\\jswhjf1cexn-f7hb5.mp4.crypted")) returned 1
	[0122.730] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0122.730] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0122.730] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.752] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=29137 | out: Addend=0xe0dacc) returned 10417202
	[0122.752] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x71e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.752] GetLastError () returned 0x3e5
	[0122.753] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0122.753] GetLastError () returned 0x26
	[0122.753] GetLastError () returned 0x26
	[0122.753] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0122.753] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.754] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0122.754] CancelIo (hFile=0x3e0) returned 1
	[0122.754] CloseHandle (hObject=0x3e0) returned 1
	[0122.756] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0122.756] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0122.756] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0122.757] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0122.757] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\xj5XTtEiJcf9TZamLjS.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\xj5xtteijcf9tzamljs.avi"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\xj5XTtEiJcf9TZamLjS.avi.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\xj5xtteijcf9tzamljs.avi.crypted")) returned 1
	[0122.758] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0122.758] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0122.758] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.791] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=15362 | out: Addend=0xe0dacc) returned 10446339
	[0122.791] WriteFile (in: hFile=0x37c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x3c10, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0122.792] GetLastError () returned 0x3e5
	[0122.792] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0122.792] GetLastError () returned 0x26
	[0122.792] GetLastError () returned 0x26
	[0122.792] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0122.792] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0122.793] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0122.793] CancelIo (hFile=0x37c) returned 1
	[0122.794] CloseHandle (hObject=0x37c) returned 1
	[0122.929] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0122.929] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0122.929] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0122.929] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0122.929] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\dB9YwY\\C4xg.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\db9ywy\\c4xg.flv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\dB9YwY\\C4xg.flv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\db9ywy\\c4xg.flv.crypted")) returned 1
	[0123.325] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0123.325] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0123.325] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0123.424] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351aac8
	[0123.424] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0123.424] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0123.424] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=14864) returned 1
	[0123.424] WriteFile (in: hFile=0x378, lpBuffer=0x4bb0054, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 0
	[0123.428] GetLastError () returned 0x3e5
	[0123.428] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351aac8 | out: hHeap=0x5f0000) returned 1
	[0123.428] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0123.736] ReadFile (in: hFile=0x378, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.743] GetLastError () returned 0x3e5
	[0123.743] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0123.822] ReadFile (in: hFile=0x378, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.831] GetLastError () returned 0x3e5
	[0123.831] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0123.871] ReadFile (in: hFile=0x3bc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.878] GetLastError () returned 0x3e5
	[0123.878] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0123.894] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 68384
	[0123.894] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0124.149] GetLastError () returned 0x3e5
	[0124.149] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0124.222] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=240 | out: Addend=0xe0dabc) returned 5475104
	[0124.222] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0124.226] GetLastError () returned 0x3e5
	[0124.226] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0124.261] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 5966848
	[0124.261] WriteFile (in: hFile=0x378, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0
	[0124.265] GetLastError () returned 0x3e5
	[0124.265] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0124.368] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5966981
	[0124.375] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0124.449] GetLastError () returned 0x3e5
	[0124.449] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0124.472] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 7441568
	[0124.472] ReadFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0124.475] GetLastError () returned 0x3e5
	[0124.475] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0124.540] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7441712
	[0124.540] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0124.729] GetLastError () returned 0x3e5
	[0124.729] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0126.199] GetLastError () returned 0x26
	[0126.199] GetLastError () returned 0x26
	[0126.199] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0126.201] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.031] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1966080
	[0127.037] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.039] GetLastError () returned 0x3e5
	[0127.039] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.047] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2457600
	[0127.053] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.059] GetLastError () returned 0x3e5
	[0127.059] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.086] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2949120
	[0127.092] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.095] GetLastError () returned 0x3e5
	[0127.095] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.103] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3440640
	[0127.109] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.111] GetLastError () returned 0x3e5
	[0127.111] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.136] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3932160
	[0127.143] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.145] GetLastError () returned 0x3e5
	[0127.145] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.158] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4423680
	[0127.165] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.167] GetLastError () returned 0x3e5
	[0127.167] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.183] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4915200
	[0127.190] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.192] GetLastError () returned 0x3e5
	[0127.192] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.195] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5406720
	[0127.201] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.203] GetLastError () returned 0x3e5
	[0127.203] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.219] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5898240
	[0127.225] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 0
	[0127.623] GetLastError () returned 0x3e5
	[0127.623] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.639] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 12215385
	[0127.645] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0127.648] GetLastError () returned 0x3e5
	[0127.648] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.656] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 12706905
	[0127.663] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0127.665] GetLastError () returned 0x3e5
	[0127.665] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.689] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 13198425
	[0127.696] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0127.699] GetLastError () returned 0x3e5
	[0127.699] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.710] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 13689945
	[0127.717] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0127.718] GetLastError () returned 0x3e5
	[0127.718] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.743] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 14181465
	[0127.750] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0x0
	[0127.752] GetLastError () returned 0x3e5
	[0127.752] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.765] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 14672992
	[0127.766] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.792] GetLastError () returned 0x3e5
	[0127.792] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.802] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 15164512
	[0127.802] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.804] GetLastError () returned 0x3e5
	[0127.804] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0127.812] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 15656032
	[0127.812] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0128.393] GetLastError () returned 0x3e5
	[0128.393] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0128.397] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2457600
	[0128.397] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0128.402] GetLastError () returned 0x3e5
	[0128.402] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0128.403] GetLastError () returned 0x26
	[0128.403] GetLastError () returned 0x26
	[0128.403] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0128.403] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0128.403] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0128.403] CancelIo (hFile=0x378) returned 1
	[0128.404] CloseHandle (hObject=0x378) returned 1
	[0128.404] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0128.404] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0128.404] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0128.404] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0128.405] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), lpNewFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.crypted" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3.crypted")) returned 1
	[0128.405] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0128.405] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0128.405] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0128.459] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3622354
	[0128.465] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0128.467] GetLastError () returned 0x3e5
	[0128.467] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0128.486] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4113874
	[0128.493] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0128.496] GetLastError () returned 0x3e5
	[0128.496] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0128.498] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4605394
	[0128.506] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0128.507] GetLastError () returned 0x3e5
	[0128.507] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0128.524] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5096914
	[0128.531] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0128.534] GetLastError () returned 0x3e5
	[0128.534] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0128.889] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9475600
	[0128.889] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0129.020] GetLastError () returned 0x3e5
	[0129.020] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0129.042] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0129.049] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0129.051] GetLastError () returned 0x3e5
	[0129.051] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0129.192] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=354421 | out: Addend=0xe0dacc) returned 1474560
	[0129.197] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x56880, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0129.199] GetLastError () returned 0x3e5
	[0129.199] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0129.199] GetLastError () returned 0x26
	[0129.199] GetLastError () returned 0x26
	[0129.199] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0129.199] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0129.200] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0129.200] CancelIo (hFile=0x3e0) returned 1
	[0129.200] CloseHandle (hObject=0x3e0) returned 1
	[0129.201] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0129.201] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0129.201] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0129.201] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0129.201] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.crypted" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.crypted")) returned 1
	[0129.202] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0129.202] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0129.202] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0129.211] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=284182 | out: Addend=0xe0dacc) returned 1828981
	[0129.216] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x45620, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0129.217] GetLastError () returned 0x3e5
	[0129.217] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 0
	[0129.218] GetLastError () returned 0x26
	[0129.218] GetLastError () returned 0x26
	[0129.218] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0129.218] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0129.219] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0129.219] CancelIo (hFile=0x3dc) returned 1
	[0129.219] CloseHandle (hObject=0x3dc) returned 1
	[0129.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0129.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0129.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0129.220] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0129.220] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.crypted" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.crypted")) returned 1
	[0129.221] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0129.221] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0129.221] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0129.299] ReadFile (in: hFile=0x37c, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 1
	[0130.106] GetLastError () returned 0x3e5
	[0130.106] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0130.140] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474560
	[0130.140] ReadFile (in: hFile=0x37c, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 1
	[0130.746] GetLastError () returned 0x3e5
	[0130.746] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0130.747] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=69760 | out: Addend=0xe0dabc) returned 5898240
	[0130.747] ReadFile (in: hFile=0x37c, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 0x0
	[0130.748] GetLastError () returned 0x3e5
	[0130.748] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0130.748] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x671788
	[0130.748] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x66b168
	[0130.748] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x66b168 | out: hHeap=0x5f0000) returned 1
	[0130.748] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x29ff980 | out: lpFileSize=0x29ff980*=561280) returned 1
	[0130.748] WriteFile (in: hFile=0x37c, lpBuffer=0x4bb0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 1
	[0130.749] GetLastError () returned 0x3e5
	[0130.749] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0130.749] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0130.760] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5968000
	[0130.760] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0133.185] GetLastError () returned 0x3e5
	[0133.185] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.194] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2949120
	[0133.194] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.195] GetLastError () returned 0x3e5
	[0133.195] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.202] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3440640
	[0133.202] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.229] GetLastError () returned 0x3e5
	[0133.229] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.241] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3932160
	[0133.241] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.243] GetLastError () returned 0x3e5
	[0133.243] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.251] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4423680
	[0133.251] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.274] GetLastError () returned 0x3e5
	[0133.274] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.593] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 12288000
	[0133.593] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0133.602] GetLastError () returned 0x3e5
	[0133.602] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.626] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 13762560
	[0133.631] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.633] GetLastError () returned 0x3e5
	[0133.633] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.635] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 14254080
	[0133.641] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.649] GetLastError () returned 0x3e5
	[0133.649] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.674] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 14745600
	[0133.678] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.680] GetLastError () returned 0x3e5
	[0133.680] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.682] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 15237120
	[0133.686] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.687] GetLastError () returned 0x3e5
	[0133.687] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.708] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 15728640
	[0133.712] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.714] GetLastError () returned 0x3e5
	[0133.714] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.717] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 16220160
	[0133.721] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.722] GetLastError () returned 0x3e5
	[0133.722] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.742] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 16711680
	[0133.747] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0133.749] GetLastError () returned 0x3e5
	[0133.749] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.797] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 16220160
	[0133.798] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.799] GetLastError () returned 0x3e5
	[0133.799] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.809] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 16711680
	[0133.809] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.834] GetLastError () returned 0x3e5
	[0133.834] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.847] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 17203200
	[0133.847] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.849] GetLastError () returned 0x3e5
	[0133.849] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0133.865] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 18186240
	[0133.866] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.883] GetLastError () returned 0x3e5
	[0133.883] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0134.167] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474560
	[0134.167] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 0
	[0134.208] GetLastError () returned 0x3e5
	[0134.208] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0134.256] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2326528
	[0134.259] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.261] GetLastError () returned 0x3e5
	[0134.261] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0134.263] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2818048
	[0134.267] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.268] GetLastError () returned 0x3e5
	[0134.268] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0134.295] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3309568
	[0134.299] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.300] GetLastError () returned 0x3e5
	[0134.300] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0134.302] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3801088
	[0134.306] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.307] GetLastError () returned 0x3e5
	[0134.307] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0134.338] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4292608
	[0134.343] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.345] GetLastError () returned 0x3e5
	[0134.345] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0134.346] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4784128
	[0134.350] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.351] GetLastError () returned 0x3e5
	[0134.351] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0134.380] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6258688
	[0134.380] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.382] GetLastError () returned 0x3e5
	[0134.382] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0134.390] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6750208
	[0134.390] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.392] GetLastError () returned 0x3e5
	[0134.392] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0134.401] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7241728
	[0134.401] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.429] GetLastError () returned 0x3e5
	[0134.429] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0134.438] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7733248
	[0134.438] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.440] GetLastError () returned 0x3e5
	[0134.440] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0134.448] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8224768
	[0134.448] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.472] GetLastError () returned 0x3e5
	[0134.472] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0135.080] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0135.080] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0135.124] GetLastError () returned 0x3e5
	[0135.124] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0135.192] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1966080
	[0135.192] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.218] GetLastError () returned 0x3e5
	[0135.218] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0135.229] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2457600
	[0135.229] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.230] GetLastError () returned 0x3e5
	[0135.230] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0135.240] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2949120
	[0135.240] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.265] GetLastError () returned 0x3e5
	[0135.265] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0135.354] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4554784
	[0135.354] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.440] GetLastError () returned 0x3e5
	[0135.440] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0135.442] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7012370
	[0135.447] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.449] GetLastError () returned 0x3e5
	[0135.449] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0135.461] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7503890
	[0135.469] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.471] GetLastError () returned 0x3e5
	[0135.471] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0135.473] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7995410
	[0135.479] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0135.481] GetLastError () returned 0x3e5
	[0135.481] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec) returned 1
	[0135.496] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=195466 | out: Addend=0xe0dacc) returned 8486930
	[0135.499] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToWrite=0x2fb90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0135.501] GetLastError () returned 0x3e5
	[0135.501] GetQueuedCompletionStatus (CompletionPort=0xc8, lpNumberOfBytesTransferred=0x29ff8f8, lpCompletionKey=0x29ff98c, lpOverlapped=0x29ff8ec, dwMilliseconds=0x1388) 

Thread:
	id = 8
	os_tid = 0x7e8

	[0057.812] GetCurrentThreadId () returned 0x7e8
	[0057.812] GetCurrentThreadId () returned 0x7e8
	[0057.812] GetLastError () returned 0x57
	[0057.812] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x364) returned 0x612d78
	[0057.812] SetLastError (dwErrCode=0x57) 
	[0057.812] GetLastError () returned 0x57
	[0057.812] SetLastError (dwErrCode=0x57) 
	[0057.813] WriteFile (in: hFile=0x7, lpBuffer=0x2c1d998*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x2c1d990, lpOverlapped=0x0 | out: lpBuffer=0x2c1d998*, lpNumberOfBytesWritten=0x2c1d990*=0x49, lpOverlapped=0x0) returned 1
	[0057.813] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0074.933] GetLastError () returned 0x102
	[0074.933] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0080.304] GetLastError () returned 0x102
	[0080.304] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0085.657] GetLastError () returned 0x102
	[0085.657] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0090.795] GetLastError () returned 0x102
	[0090.795] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0095.813] GetLastError () returned 0x102
	[0095.813] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0101.120] GetLastError () returned 0x102
	[0101.120] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0110.604] GetLastError () returned 0x102
	[0110.604] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0115.837] GetLastError () returned 0x102
	[0115.838] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0116.066] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0116.066] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4042048
	[0116.066] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4042048 | out: hHeap=0x5f0000) returned 1
	[0116.066] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=13008) returned 1
	[0116.066] WriteFile (in: hFile=0x3dc, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.067] GetLastError () returned 0x3e5
	[0116.067] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0116.067] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0116.112] ReadFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0116.112] GetLastError () returned 0x3e5
	[0116.112] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0116.114] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=41872 | out: Addend=0xe0dabc) returned 2068960
	[0116.114] ReadFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0116.114] GetLastError () returned 0x3e5
	[0116.114] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0116.114] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4046058
	[0116.115] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046468
	[0116.115] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046468 | out: hHeap=0x5f0000) returned 1
	[0116.115] GetFileSizeEx (in: hFile=0x3f4, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=41872) returned 1
	[0116.115] WriteFile (in: hFile=0x3f4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.115] GetLastError () returned 0x3e5
	[0116.115] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0116.115] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.493] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=42795 | out: Addend=0xe0dacc) returned 8832348
	[0118.494] WriteFile (in: hFile=0x3e4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0xa730, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.494] GetLastError () returned 0x3e5
	[0118.494] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.501] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=68032 | out: Addend=0xe0dabc) returned 8875264
	[0118.501] ReadFile (in: hFile=0x3f4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0118.501] GetLastError () returned 0x3e5
	[0118.501] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0118.503] GetLastError () returned 0x26
	[0118.503] GetLastError () returned 0x26
	[0118.503] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4ab0020) returned 1
	[0118.503] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.506] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0118.506] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4049050
	[0118.507] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4049050 | out: hHeap=0x5f0000) returned 1
	[0118.507] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=89584) returned 1
	[0118.507] WriteFile (in: hFile=0x378, lpBuffer=0x4bb0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 1
	[0118.507] GetLastError () returned 0x3e5
	[0118.508] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0118.508] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.540] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0118.540] CancelIo (hFile=0x3c4) returned 1
	[0118.540] CloseHandle (hObject=0x3c4) returned 1
	[0118.544] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0118.544] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0118.545] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4cb0020 | out: hHeap=0x5f0000) returned 1
	[0118.545] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043320
	[0118.545] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\Z91x8WDi69_xh58s6v_4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\z91x8wdi69_xh58s6v_4.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\Z91x8WDi69_xh58s6v_4.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\z91x8wdi69_xh58s6v_4.mp3.crypted")) returned 1
	[0118.546] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043320 | out: hHeap=0x5f0000) returned 1
	[0118.546] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0118.546] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.547] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=81193 | out: Addend=0xe0dacc) returned 9141054
	[0118.549] WriteFile (in: hFile=0x3dc, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x13d30, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0118.549] GetLastError () returned 0x3e5
	[0118.549] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0118.550] GetLastError () returned 0x26
	[0118.550] GetLastError () returned 0x26
	[0118.550] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0118.550] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.551] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043320
	[0118.551] CancelIo (hFile=0x3dc) returned 1
	[0118.551] CloseHandle (hObject=0x3dc) returned 1
	[0118.557] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047570 | out: hHeap=0x5f0000) returned 1
	[0118.557] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043150 | out: hHeap=0x5f0000) returned 1
	[0118.557] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0118.557] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0118.557] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\itp9emm8tymg346g.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\itp9emm8tymg346g.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\itp9emm8tymg346g.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\itp9emm8tymg346g.mp3.crypted")) returned 1
	[0118.558] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0118.558] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043320 | out: hHeap=0x5f0000) returned 1
	[0118.558] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.560] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9222247
	[0118.565] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.567] GetLastError () returned 0x3e5
	[0118.568] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.591] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9713767
	[0118.597] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.600] GetLastError () returned 0x3e5
	[0118.601] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.606] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0118.612] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.613] GetLastError () returned 0x3e5
	[0118.613] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.614] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0118.621] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.622] GetLastError () returned 0x3e5
	[0118.622] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.646] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0118.652] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.654] GetLastError () returned 0x3e5
	[0118.654] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.655] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474560
	[0118.663] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.665] GetLastError () returned 0x3e5
	[0118.665] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.689] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1966080
	[0118.698] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0118.701] GetLastError () returned 0x3e5
	[0118.701] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0118.726] GetLastError () returned 0x26
	[0118.726] GetLastError () returned 0x26
	[0118.726] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4db0020) returned 1
	[0118.726] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.727] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0118.727] CancelIo (hFile=0x37c) returned 1
	[0118.728] CloseHandle (hObject=0x37c) returned 1
	[0118.730] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0118.730] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0118.730] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4db0020 | out: hHeap=0x5f0000) returned 1
	[0118.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043320
	[0118.731] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\P3Sb-u-d6.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\p3sb-u-d6.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\P3Sb-u-d6.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\p3sb-u-d6.wav.crypted")) returned 1
	[0118.732] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043320 | out: hHeap=0x5f0000) returned 1
	[0118.732] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0118.732] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.775] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0118.776] GetLastError () returned 0x3e5
	[0118.776] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.779] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=96960 | out: Addend=0xe0dabc) returned 2040400
	[0118.779] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0118.779] GetLastError () returned 0x3e5
	[0118.779] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.779] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0118.779] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0118.780] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0118.780] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=96960) returned 1
	[0118.780] WriteFile (in: hFile=0x3dc, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.780] GetLastError () returned 0x3e5
	[0118.780] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0118.780] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.810] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=76601 | out: Addend=0xe0dacc) returned 2628866
	[0118.812] WriteFile (in: hFile=0x3dc, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x12b40, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.813] GetLastError () returned 0x3e5
	[0118.813] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0118.813] GetLastError () returned 0x26
	[0118.813] GetLastError () returned 0x26
	[0118.813] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0118.813] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.814] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043238
	[0118.815] CancelIo (hFile=0x3dc) returned 1
	[0118.815] CloseHandle (hObject=0x3dc) returned 1
	[0118.822] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0118.822] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043150 | out: hHeap=0x5f0000) returned 1
	[0118.822] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0118.823] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0118.823] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\w1DbSomcsNE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\w1dbsomcsne.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\w1DbSomcsNE.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\w1dbsomcsne.mp3.crypted")) returned 1
	[0118.824] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0118.824] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043238 | out: hHeap=0x5f0000) returned 1
	[0118.824] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.845] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0118.846] GetLastError () returned 0x3e5
	[0118.846] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.849] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=91328 | out: Addend=0xe0dabc) returned 2213968
	[0118.849] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0118.850] GetLastError () returned 0x3e5
	[0118.850] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.850] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0118.850] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0118.850] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0118.850] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=91328) returned 1
	[0118.850] WriteFile (in: hFile=0x3dc, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0118.851] GetLastError () returned 0x3e5
	[0118.851] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0118.851] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.877] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2796816
	[0118.877] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.901] GetLastError () returned 0x3e5
	[0118.901] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.911] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3288336
	[0118.911] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.912] GetLastError () returned 0x3e5
	[0118.912] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.920] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3779856
	[0118.920] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.944] GetLastError () returned 0x3e5
	[0118.944] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.953] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4271376
	[0118.954] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.954] GetLastError () returned 0x3e5
	[0118.954] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.962] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4762896
	[0118.962] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.985] GetLastError () returned 0x3e5
	[0118.985] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0118.995] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5254416
	[0118.995] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.995] GetLastError () returned 0x3e5
	[0118.995] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.003] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5745936
	[0119.003] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.029] GetLastError () returned 0x3e5
	[0119.029] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.040] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6237456
	[0119.040] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0119.041] GetLastError () returned 0x3e5
	[0119.041] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.044] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=49648 | out: Addend=0xe0dabc) returned 6728976
	[0119.044] ReadFile (in: hFile=0x37c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.045] GetLastError () returned 0x3e5
	[0119.045] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.045] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0119.045] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0119.045] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0119.045] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=49648) returned 1
	[0119.046] WriteFile (in: hFile=0x37c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.046] GetLastError () returned 0x3e5
	[0119.046] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.046] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.505] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=5643 | out: Addend=0xe0dacc) returned 11592846
	[0119.505] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x1610, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0119.505] GetLastError () returned 0x3e5
	[0119.506] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0119.506] GetLastError () returned 0x26
	[0119.506] GetLastError () returned 0x26
	[0119.506] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0119.506] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.507] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0119.507] CancelIo (hFile=0x38c) returned 1
	[0119.507] CloseHandle (hObject=0x38c) returned 1
	[0119.508] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0119.508] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0119.508] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0119.509] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0119.509] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\xJa2_yk_SCYjO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\xja2_yk_scyjo.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\xJa2_yk_SCYjO.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\xja2_yk_scyjo.mp3.crypted")) returned 1
	[0119.510] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0119.510] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0119.510] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.531] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0119.531] GetLastError () returned 0x3e5
	[0119.531] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.533] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=58848 | out: Addend=0xe0dabc) returned 11598592
	[0119.533] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0119.533] GetLastError () returned 0x3e5
	[0119.533] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.533] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0119.534] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0119.534] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0119.534] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=58848) returned 1
	[0119.534] WriteFile (in: hFile=0x3ec, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0119.534] GetLastError () returned 0x3e5
	[0119.534] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0119.535] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.577] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 12148848
	[0119.584] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.587] GetLastError () returned 0x3e5
	[0119.587] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.588] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 12640368
	[0119.595] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.596] GetLastError () returned 0x3e5
	[0119.597] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.624] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 13131888
	[0119.631] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.634] GetLastError () returned 0x3e5
	[0119.634] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.635] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0119.642] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.644] GetLastError () returned 0x3e5
	[0119.644] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.669] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0119.677] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.680] GetLastError () returned 0x3e5
	[0119.680] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.681] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0119.688] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0119.691] GetLastError () returned 0x3e5
	[0119.691] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.708] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474560
	[0119.716] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.719] GetLastError () returned 0x3e5
	[0119.719] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.721] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1966080
	[0119.736] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.738] GetLastError () returned 0x3e5
	[0119.738] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.766] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2457600
	[0119.773] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0119.776] GetLastError () returned 0x3e5
	[0119.777] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.778] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=11328 | out: Addend=0xe0dabc) returned 2949120
	[0119.778] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.778] GetLastError () returned 0x3e5
	[0119.778] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0119.779] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0119.779] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0119.779] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0119.779] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=11328) returned 1
	[0119.779] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.779] GetLastError () returned 0x3e5
	[0119.779] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0119.779] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.347] ReadFile (in: hFile=0x38c, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0120.348] GetLastError () returned 0x3e5
	[0120.348] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.353] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=69837 | out: Addend=0xe0dacc) returned 7148960
	[0120.354] WriteFile (in: hFile=0x37c, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x110d0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0120.354] GetLastError () returned 0x3e5
	[0120.354] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0120.356] GetLastError () returned 0x26
	[0120.356] GetLastError () returned 0x26
	[0120.356] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0120.356] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.358] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4042558
	[0120.358] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.358] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.358] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=95360) returned 1
	[0120.358] WriteFile (in: hFile=0x3ec, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0120.358] GetLastError () returned 0x3e5
	[0120.358] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4042558 | out: hHeap=0x5f0000) returned 1
	[0120.358] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.379] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0120.379] CancelIo (hFile=0x38c) returned 1
	[0120.379] CloseHandle (hObject=0x38c) returned 1
	[0120.380] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0120.381] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0120.381] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0120.381] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0120.381] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\bCE e6y.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\bce e6y.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\bCE e6y.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\bce e6y.bmp.crypted")) returned 1
	[0120.382] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0120.382] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0120.382] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.426] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=14874 | out: Addend=0xe0dacc) returned 7218797
	[0120.427] WriteFile (in: hFile=0x3dc, lpBuffer=0x4bb0054*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 1
	[0120.427] GetLastError () returned 0x3e5
	[0120.427] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0120.428] GetLastError () returned 0x26
	[0120.428] GetLastError () returned 0x26
	[0120.428] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4bb0020) returned 1
	[0120.428] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.429] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0120.429] CancelIo (hFile=0x3dc) returned 1
	[0120.429] CloseHandle (hObject=0x3dc) returned 1
	[0120.431] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0120.431] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0120.431] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4bb0020 | out: hHeap=0x5f0000) returned 1
	[0120.432] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0120.432] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\KjHEn8WtqmnWqXr.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\kjhen8wtqmnwqxr.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\KjHEn8WtqmnWqXr.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\kjhen8wtqmnwqxr.bmp.crypted")) returned 1
	[0120.433] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0120.433] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0120.433] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.450] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0120.451] GetLastError () returned 0x3e5
	[0120.451] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.452] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=44336 | out: Addend=0xe0dabc) returned 7233776
	[0120.452] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0120.452] GetLastError () returned 0x3e5
	[0120.452] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.452] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0120.452] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.452] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.452] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=44336) returned 1
	[0120.452] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.453] GetLastError () returned 0x3e5
	[0120.453] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0120.453] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.479] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=13346 | out: Addend=0xe0dacc) returned 7277994
	[0120.480] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x3430, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.480] GetLastError () returned 0x3e5
	[0120.480] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0120.480] GetLastError () returned 0x26
	[0120.480] GetLastError () returned 0x26
	[0120.480] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0120.480] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.481] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.481] CancelIo (hFile=0x3d8) returned 1
	[0120.481] CloseHandle (hObject=0x3d8) returned 1
	[0120.484] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0120.485] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0120.485] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0120.485] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0120.485] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\c8q8iM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\c8q8im.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\c8q8iM.jpg.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\c8q8im.jpg.crypted")) returned 1
	[0120.487] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0120.487] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.487] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.504] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0120.504] GetLastError () returned 0x3e5
	[0120.504] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.505] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=11536 | out: Addend=0xe0dabc) returned 7291472
	[0120.505] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0120.505] GetLastError () returned 0x3e5
	[0120.505] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.505] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0120.506] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.506] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.506] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=11536) returned 1
	[0120.506] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.506] GetLastError () returned 0x3e5
	[0120.506] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0120.506] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.532] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=76036 | out: Addend=0xe0dacc) returned 7302867
	[0120.534] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x12910, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.535] GetLastError () returned 0x3e5
	[0120.535] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0120.535] GetLastError () returned 0x26
	[0120.535] GetLastError () returned 0x26
	[0120.535] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0120.535] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.536] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.536] CancelIo (hFile=0x3d8) returned 1
	[0120.536] CloseHandle (hObject=0x3d8) returned 1
	[0120.538] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0120.538] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0120.538] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0120.539] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0120.539] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iMLZwd4Mt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\imlzwd4mt.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iMLZwd4Mt.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\imlzwd4mt.bmp.crypted")) returned 1
	[0120.540] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0120.540] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.540] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.556] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0120.556] GetLastError () returned 0x3e5
	[0120.556] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.557] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=38896 | out: Addend=0xe0dabc) returned 7379056
	[0120.557] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0120.557] GetLastError () returned 0x3e5
	[0120.558] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.558] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0120.558] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.558] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.558] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=38896) returned 1
	[0120.558] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.558] GetLastError () returned 0x3e5
	[0120.558] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0120.558] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.580] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=94181 | out: Addend=0xe0dacc) returned 7417790
	[0120.582] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x16ff0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.582] GetLastError () returned 0x3e5
	[0120.582] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0120.582] GetLastError () returned 0x26
	[0120.583] GetLastError () returned 0x26
	[0120.583] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0120.583] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.584] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0120.584] CancelIo (hFile=0x3d8) returned 1
	[0120.584] CloseHandle (hObject=0x3d8) returned 1
	[0120.586] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0120.586] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0120.586] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0120.586] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0120.586] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\M_M0VLOO2_Zp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\m_m0vloo2_zp.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\M_M0VLOO2_Zp.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\m_m0vloo2_zp.gif.crypted")) returned 1
	[0120.588] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0120.588] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0120.588] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.612] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7511971
	[0120.617] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.620] GetLastError () returned 0x3e5
	[0120.620] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.622] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8003491
	[0120.628] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.630] GetLastError () returned 0x3e5
	[0120.630] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.655] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8495011
	[0120.661] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.664] GetLastError () returned 0x3e5
	[0120.664] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.666] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0120.672] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.674] GetLastError () returned 0x3e5
	[0120.674] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.698] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0120.704] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.707] GetLastError () returned 0x3e5
	[0120.707] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.709] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0120.715] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.716] GetLastError () returned 0x3e5
	[0120.716] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.744] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474560
	[0120.749] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.753] GetLastError () returned 0x3e5
	[0120.753] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.755] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1966080
	[0120.761] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.762] GetLastError () returned 0x3e5
	[0120.762] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.796] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2457600
	[0120.802] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.804] GetLastError () returned 0x3e5
	[0120.805] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.806] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 2949120
	[0120.810] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.812] GetLastError () returned 0x3e5
	[0120.812] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.814] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3440640
	[0120.818] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.820] GetLastError () returned 0x3e5
	[0120.820] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.942] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=11475 | out: Addend=0xe0dacc) returned 3932160
	[0120.942] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x2ce0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0x0
	[0120.943] GetLastError () returned 0x3e5
	[0120.944] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0120.949] GetLastError () returned 0x26
	[0120.949] GetLastError () returned 0x26
	[0120.950] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0120.950] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.952] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.952] CancelIo (hFile=0x3d8) returned 1
	[0120.952] CloseHandle (hObject=0x3d8) returned 1
	[0120.954] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0120.954] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0120.954] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0120.959] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0120.959] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\RvLA6oRpZxL.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rvla6orpzxl.bmp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\RvLA6oRpZxL.bmp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rvla6orpzxl.bmp.crypted")) returned 1
	[0120.960] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0120.960] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.960] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.982] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0120.982] GetLastError () returned 0x3e5
	[0120.982] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.983] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=34752 | out: Addend=0xe0dabc) returned 4435168
	[0120.984] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0120.984] GetLastError () returned 0x3e5
	[0120.984] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0120.984] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0120.984] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.984] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.984] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=34752) returned 1
	[0120.984] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.985] GetLastError () returned 0x3e5
	[0120.985] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0120.985] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.075] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=35694 | out: Addend=0xe0dacc) returned 3978379
	[0121.075] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x8b70, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0121.076] GetLastError () returned 0x3e5
	[0121.076] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0121.076] GetLastError () returned 0x26
	[0121.076] GetLastError () returned 0x26
	[0121.076] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0121.076] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.077] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0121.077] CancelIo (hFile=0x3dc) returned 1
	[0121.077] CloseHandle (hObject=0x3dc) returned 1
	[0121.097] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0121.097] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0121.097] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0121.098] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0121.098] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\9-kiKSk07WNiitE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\9-kiksk07wniite.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\9-kiKSk07WNiitE.png.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\9-kiksk07wniite.png.crypted")) returned 1
	[0121.099] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0121.099] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0121.099] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.117] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0121.118] GetLastError () returned 0x3e5
	[0121.118] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.119] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=40400 | out: Addend=0xe0dabc) returned 4505616
	[0121.119] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0121.119] GetLastError () returned 0x3e5
	[0121.119] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.120] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0121.120] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0121.120] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0121.120] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=40400) returned 1
	[0121.120] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0121.120] GetLastError () returned 0x3e5
	[0121.120] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0121.120] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.170] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=50782 | out: Addend=0xe0dacc) returned 4054467
	[0121.171] WriteFile (in: hFile=0x37c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xc660, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0121.171] GetLastError () returned 0x3e5
	[0121.171] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0121.172] GetLastError () returned 0x26
	[0121.172] GetLastError () returned 0x26
	[0121.172] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0121.172] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.173] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0121.173] CancelIo (hFile=0x37c) returned 1
	[0121.173] CloseHandle (hObject=0x37c) returned 1
	[0121.178] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0121.178] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0121.178] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0121.179] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0121.179] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\gwIa15KOiIB.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\gwia15koiib.jpg"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\gwIa15KOiIB.jpg.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\gwia15koiib.jpg.crypted")) returned 1
	[0121.180] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0121.180] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0121.180] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.190] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4105249
	[0121.196] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.199] GetLastError () returned 0x3e5
	[0121.199] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.201] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4596769
	[0121.208] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0121.209] GetLastError () returned 0x3e5
	[0121.209] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.360] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0121.360] GetLastError () returned 0x3e5
	[0121.360] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.365] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=38501 | out: Addend=0xe0dacc) returned 5161168
	[0121.366] WriteFile (in: hFile=0x3ec, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x9670, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0121.366] GetLastError () returned 0x3e5
	[0121.366] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.370] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=87888 | out: Addend=0xe0dabc) returned 5691232
	[0121.370] ReadFile (in: hFile=0x3e0, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0121.370] GetLastError () returned 0x3e5
	[0121.370] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0121.372] GetLastError () returned 0x26
	[0121.372] GetLastError () returned 0x26
	[0121.372] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4bb0020) returned 1
	[0121.372] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0121.376] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x6726b8
	[0121.376] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0121.377] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0121.377] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=67584) returned 1
	[0121.377] WriteFile (in: hFile=0x378, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0121.377] GetLastError () returned 0x3e5
	[0121.377] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6726b8 | out: hHeap=0x5f0000) returned 1
	[0121.377] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0123.280] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=93823 | out: Addend=0xe0dacc) returned 3332340
	[0123.282] WriteFile (in: hFile=0x3b8, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x16e80, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0123.313] GetLastError () returned 0x3e5
	[0123.313] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0123.313] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=93824 | out: Addend=0xe0dabc) returned 3332464
	[0123.313] ReadFile (in: hFile=0x3b8, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0123.313] GetLastError () returned 0x3e5
	[0123.313] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0123.313] GetLastError () returned 0x26
	[0123.313] GetLastError () returned 0x26
	[0123.314] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4ab0020) returned 1
	[0123.314] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0123.314] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351b5e0
	[0123.314] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0123.314] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0123.314] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=93824) returned 1
	[0123.314] WriteFile (in: hFile=0x3b8, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0123.314] GetLastError () returned 0x3e5
	[0123.314] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351b5e0 | out: hHeap=0x5f0000) returned 1
	[0123.314] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0123.314] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351b5e0
	[0123.315] CancelIo (hFile=0x3b8) returned 1
	[0123.315] CloseHandle (hObject=0x3b8) returned 1
	[0123.321] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351aac8 | out: hHeap=0x5f0000) returned 1
	[0123.321] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0123.321] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4ab0020 | out: hHeap=0x5f0000) returned 1
	[0123.322] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x351b900
	[0123.322] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\RtWq1YR6YWVPw.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\rtwq1yr6ywvpw.swf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\RtWq1YR6YWVPw.swf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\rtwq1yr6ywvpw.swf.crypted")) returned 1
	[0123.335] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351b900 | out: hHeap=0x5f0000) returned 1
	[0123.335] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351b5e0 | out: hHeap=0x5f0000) returned 1
	[0123.335] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0124.472] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0124.472] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0124.472] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0124.472] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=144) returned 1
	[0124.472] WriteFile (in: hFile=0x3d8, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0124.473] GetLastError () returned 0x3e5
	[0124.473] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0124.473] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0124.550] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7933232
	[0124.550] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.577] GetLastError () returned 0x3e5
	[0124.577] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0124.588] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8424752
	[0124.588] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.590] GetLastError () returned 0x3e5
	[0124.590] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0124.598] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8916272
	[0124.598] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.600] GetLastError () returned 0x3e5
	[0124.600] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0124.608] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9407792
	[0124.608] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.636] GetLastError () returned 0x3e5
	[0124.636] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0124.646] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9899312
	[0124.646] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.647] GetLastError () returned 0x3e5
	[0124.647] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0124.656] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10390832
	[0124.657] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.680] GetLastError () returned 0x3e5
	[0124.680] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0124.690] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10882352
	[0124.690] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.692] GetLastError () returned 0x3e5
	[0124.692] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0124.701] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 11373872
	[0124.701] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0124.728] GetLastError () returned 0x3e5
	[0124.728] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0126.200] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0126.200] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0126.200] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0126.200] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=896) returned 1
	[0126.200] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.200] GetLastError () returned 0x3e5
	[0126.200] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0126.200] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0127.319] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6881280
	[0127.319] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.321] GetLastError () returned 0x3e5
	[0127.321] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0127.331] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7372800
	[0127.331] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.360] GetLastError () returned 0x3e5
	[0127.360] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0127.370] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7864320
	[0127.370] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.372] GetLastError () returned 0x3e5
	[0127.372] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0127.380] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8355840
	[0127.380] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.409] GetLastError () returned 0x3e5
	[0127.409] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0127.419] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8847360
	[0127.419] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.421] GetLastError () returned 0x3e5
	[0127.421] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0127.430] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9338880
	[0127.430] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0127.456] GetLastError () returned 0x3e5
	[0127.456] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0127.753] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 14181472
	[0127.753] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0127.838] GetLastError () returned 0x3e5
	[0127.838] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0127.839] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 16147545
	[0127.845] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0127.848] GetLastError () returned 0x3e5
	[0127.848] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0127.854] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 16639065
	[0127.861] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0127.863] GetLastError () returned 0x3e5
	[0127.863] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0127.878] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 17130585
	[0127.885] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0127.888] GetLastError () returned 0x3e5
	[0127.888] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0127.890] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 17622105
	[0128.395] WriteFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 0
	[0128.405] GetLastError () returned 0x3e5
	[0128.406] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0128.456] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0128.778] GetLastError () returned 0x3e5
	[0128.778] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0128.801] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8046034
	[0128.808] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0128.810] GetLastError () returned 0x3e5
	[0128.810] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0128.839] ReadFile (in: hFile=0x3ec, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0129.511] GetLastError () returned 0x3e5
	[0129.511] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0129.528] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0129.528] CancelIo (hFile=0x3dc) returned 1
	[0129.528] CloseHandle (hObject=0x3dc) returned 1
	[0129.528] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0129.528] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0129.528] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0129.529] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0129.529] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.crypted" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.crypted")) returned 1
	[0129.530] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0129.530] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0129.530] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0129.543] GetLastError () returned 0x26
	[0129.543] GetLastError () returned 0x26
	[0129.543] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0129.544] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0129.558] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6750317
	[0129.565] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0129.567] GetLastError () returned 0x3e5
	[0129.567] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0129.570] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=103764 | out: Addend=0xe0dacc) returned 7241837
	[0129.571] WriteFile (in: hFile=0x3ec, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x19560, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0129.572] GetLastError () returned 0x3e5
	[0129.572] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 0
	[0129.572] GetLastError () returned 0x26
	[0129.572] GetLastError () returned 0x26
	[0129.572] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4ab0020) returned 1
	[0129.573] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0129.573] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0129.573] CancelIo (hFile=0x3ec) returned 1
	[0129.573] CloseHandle (hObject=0x3ec) returned 1
	[0129.574] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0129.574] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0129.574] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4ab0020 | out: hHeap=0x5f0000) returned 1
	[0129.574] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0129.575] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.crypted" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.crypted")) returned 1
	[0129.575] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0129.575] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0129.575] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0129.679] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7345601
	[0129.686] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0129.688] GetLastError () returned 0x3e5
	[0129.688] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0129.772] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7837121
	[0129.779] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0129.780] GetLastError () returned 0x3e5
	[0129.780] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0129.971] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0129.977] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0129.980] GetLastError () returned 0x3e5
	[0129.980] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0129.982] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0129.988] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0129.990] GetLastError () returned 0x3e5
	[0129.990] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0130.078] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0130.085] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0130.088] GetLastError () returned 0x3e5
	[0130.088] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0130.106] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474560
	[0130.138] WriteFile (in: hFile=0x37c, lpBuffer=0x4bb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 1
	[0130.140] GetLastError () returned 0x3e5
	[0130.140] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0130.149] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1966080
	[0130.149] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0130.164] GetLastError () returned 0x3e5
	[0130.164] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0130.175] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2457600
	[0130.175] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0130.508] GetLastError () returned 0x3e5
	[0130.508] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0130.518] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4915200
	[0130.518] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0130.761] GetLastError () returned 0x3e5
	[0130.761] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0130.761] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6459516
	[0130.768] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0130.770] GetLastError () returned 0x3e5
	[0130.770] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0130.783] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 6951036
	[0130.789] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0130.791] GetLastError () returned 0x3e5
	[0130.791] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.045] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0133.045] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.063] GetLastError () returned 0x3e5
	[0133.063] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.070] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0133.070] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.070] GetLastError () returned 0x3e5
	[0133.070] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.076] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0133.076] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.095] GetLastError () returned 0x3e5
	[0133.095] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.101] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474560
	[0133.101] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.102] GetLastError () returned 0x3e5
	[0133.102] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.108] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1966080
	[0133.108] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.133] GetLastError () returned 0x3e5
	[0133.133] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.285] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4915200
	[0133.285] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0133.481] GetLastError () returned 0x3e5
	[0133.481] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.491] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10321920
	[0133.497] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.501] GetLastError () returned 0x3e5
	[0133.501] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.502] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10813440
	[0133.508] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.510] GetLastError () returned 0x3e5
	[0133.510] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.533] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 11304960
	[0133.539] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.541] GetLastError () returned 0x3e5
	[0133.541] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.544] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 11796480
	[0133.550] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.551] GetLastError () returned 0x3e5
	[0133.551] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.574] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 12288000
	[0133.580] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.583] GetLastError () returned 0x3e5
	[0133.583] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.584] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 12779520
	[0133.591] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0133.592] GetLastError () returned 0x3e5
	[0133.592] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.855] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 17694720
	[0133.856] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0133.893] GetLastError () returned 0x3e5
	[0133.893] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.913] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 20152320
	[0133.920] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.922] GetLastError () returned 0x3e5
	[0133.922] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.948] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 20643840
	[0133.974] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.977] GetLastError () returned 0x3e5
	[0133.977] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0133.980] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 21135360
	[0133.986] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.987] GetLastError () returned 0x3e5
	[0133.988] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0134.014] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 21626880
	[0134.021] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.024] GetLastError () returned 0x3e5
	[0134.024] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0134.026] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 22118400
	[0134.034] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 1
	[0134.036] GetLastError () returned 0x3e5
	[0134.036] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0134.071] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 0
	[0134.077] WriteFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0134.081] GetLastError () returned 0x3e5
	[0134.081] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0134.114] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0134.121] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.125] GetLastError () returned 0x3e5
	[0134.125] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0134.127] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0134.134] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0134.135] GetLastError () returned 0x3e5
	[0134.135] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0134.178] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1966080
	[0134.178] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0134.192] GetLastError () returned 0x3e5
	[0134.192] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0134.201] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=360448 | out: Addend=0xe0dabc) returned 2457600
	[0134.201] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0134.201] GetLastError () returned 0x3e5
	[0134.201] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc) returned 1
	[0134.201] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0134.202] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x66b168
	[0134.202] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x66b168 | out: hHeap=0x5f0000) returned 1
	[0134.202] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x2c1f470 | out: lpFileSize=0x2c1f470*=9699328) returned 1
	[0134.202] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0134.204] GetLastError () returned 0x3e5
	[0134.204] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0134.204] GetQueuedCompletionStatus (CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2c1f3e8, lpCompletionKey=0x2c1f47c, lpOverlapped=0x2c1f3dc, dwMilliseconds=0x1388) 

Thread:
	id = 9
	os_tid = 0x114

	[0057.814] GetCurrentThreadId () returned 0x114
	[0057.814] GetCurrentThreadId () returned 0x114
	[0057.814] GetLastError () returned 0x57
	[0057.814] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x364) returned 0x6132f8
	[0057.814] SetLastError (dwErrCode=0x57) 
	[0057.814] GetLastError () returned 0x57
	[0057.814] SetLastError (dwErrCode=0x57) 
	[0057.814] WriteFile (in: hFile=0x7, lpBuffer=0x2d3dcf8*, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0x2d3dcf0, lpOverlapped=0x0 | out: lpBuffer=0x2d3dcf8*, lpNumberOfBytesWritten=0x2d3dcf0*=0x47, lpOverlapped=0x0) returned 1
	[0057.815] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0074.933] GetLastError () returned 0x102
	[0074.933] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0079.979] GetLastError () returned 0x102
	[0079.979] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0085.656] GetLastError () returned 0x102
	[0085.656] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0090.794] GetLastError () returned 0x102
	[0090.794] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0095.812] GetLastError () returned 0x102
	[0095.812] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0101.121] GetLastError () returned 0x102
	[0101.121] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0109.963] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0109.979] GetLastError () returned 0x3e5
	[0109.979] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0109.991] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491520
	[0109.998] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.000] GetLastError () returned 0x3e5
	[0110.000] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0110.011] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983040
	[0110.023] WriteFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 0x0
	[0110.024] GetLastError () returned 0x3e5
	[0110.024] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0110.043] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474560
	[0110.043] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.080] GetLastError () returned 0x3e5
	[0110.081] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0110.418] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2036832
	[0110.418] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0110.571] GetLastError () returned 0x3e5
	[0110.571] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0110.580] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4224096
	[0110.580] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0110.604] GetLastError () returned 0x3e5
	[0110.604] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0115.838] GetLastError () returned 0x102
	[0115.838] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.857] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=36096 | out: Addend=0xe0dabc) returned 1681840
	[0115.857] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0115.857] GetLastError () returned 0x3e5
	[0115.857] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.858] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.858] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0115.858] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0115.858] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=36096) returned 1
	[0115.858] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.858] GetLastError () returned 0x3e5
	[0115.858] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.858] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.886] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=82640 | out: Addend=0xe0dabc) returned 1717936
	[0115.886] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0115.886] GetLastError () returned 0x3e5
	[0115.886] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.887] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.887] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0115.887] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0115.887] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=82640) returned 1
	[0115.887] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.887] GetLastError () returned 0x3e5
	[0115.887] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.887] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.904] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=39840 | out: Addend=0xe0dabc) returned 1800576
	[0115.904] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0115.904] GetLastError () returned 0x3e5
	[0115.904] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.905] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.905] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0115.905] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0115.905] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=39840) returned 1
	[0115.905] WriteFile (in: hFile=0x3c4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.905] GetLastError () returned 0x3e5
	[0115.905] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.905] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.923] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=48384 | out: Addend=0xe0dabc) returned 1840416
	[0115.923] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0115.923] GetLastError () returned 0x3e5
	[0115.923] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.924] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.924] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0115.924] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0115.924] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=48384) returned 1
	[0115.924] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.924] GetLastError () returned 0x3e5
	[0115.924] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.924] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.942] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=63536 | out: Addend=0xe0dabc) returned 1888800
	[0115.942] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0115.942] GetLastError () returned 0x3e5
	[0115.942] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.943] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0115.943] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0115.943] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=63536) returned 1
	[0115.943] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.943] GetLastError () returned 0x3e5
	[0115.943] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.943] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.965] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=2096 | out: Addend=0xe0dabc) returned 1952336
	[0115.965] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0115.965] GetLastError () returned 0x3e5
	[0115.965] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.965] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.965] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0115.965] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0115.965] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=2096) returned 1
	[0115.965] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.965] GetLastError () returned 0x3e5
	[0115.965] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.965] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.983] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=76048 | out: Addend=0xe0dabc) returned 1954432
	[0115.983] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0115.983] GetLastError () returned 0x3e5
	[0115.983] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0115.983] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0115.983] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0115.983] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0115.983] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=76048) returned 1
	[0115.983] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0115.983] GetLastError () returned 0x3e5
	[0115.983] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0115.984] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.004] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=2352 | out: Addend=0xe0dabc) returned 2030480
	[0116.004] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.004] GetLastError () returned 0x3e5
	[0116.004] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.005] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0116.005] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4042048
	[0116.005] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4042048 | out: hHeap=0x5f0000) returned 1
	[0116.005] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=2352) returned 1
	[0116.005] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.005] GetLastError () returned 0x3e5
	[0116.005] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.005] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.023] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=23120 | out: Addend=0xe0dabc) returned 2032832
	[0116.023] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.023] GetLastError () returned 0x3e5
	[0116.023] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.024] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0116.024] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4043050
	[0116.024] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043050 | out: hHeap=0x5f0000) returned 1
	[0116.024] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=23120) returned 1
	[0116.024] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.024] GetLastError () returned 0x3e5
	[0116.024] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.024] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.058] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=12993 | out: Addend=0xe0dacc) returned 2055822
	[0116.059] WriteFile (in: hFile=0x3dc, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x32d0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.065] GetLastError () returned 0x3e5
	[0116.065] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0116.066] GetLastError () returned 0x26
	[0116.066] GetLastError () returned 0x26
	[0116.066] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0116.066] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.067] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0116.067] CancelIo (hFile=0x3dc) returned 1
	[0116.067] CloseHandle (hObject=0x3dc) returned 1
	[0116.069] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0116.069] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.069] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0116.069] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x351fec8
	[0116.069] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\P0V7vZLRf\\Nkh4_3uh0GOJgz3RyUfq.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\p0v7vzlrf\\nkh4_3uh0gojgz3ryufq.odp"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\P0V7vZLRf\\Nkh4_3uh0GOJgz3RyUfq.odp.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\p0v7vzlrf\\nkh4_3uh0gojgz3ryufq.odp.crypted")) returned 1
	[0116.124] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0116.125] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0116.125] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.160] ReadFile (in: hFile=0x3dc, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.160] GetLastError () returned 0x3e5
	[0116.160] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.162] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=73312 | out: Addend=0xe0dabc) returned 2110832
	[0116.162] ReadFile (in: hFile=0x3dc, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0116.163] GetLastError () returned 0x3e5
	[0116.163] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.163] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4046058
	[0116.163] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046468
	[0116.163] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046468 | out: hHeap=0x5f0000) returned 1
	[0116.163] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=73312) returned 1
	[0116.163] WriteFile (in: hFile=0x3dc, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.164] GetLastError () returned 0x3e5
	[0116.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0116.164] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.189] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=65005 | out: Addend=0xe0dacc) returned 2183991
	[0116.190] WriteFile (in: hFile=0x3ec, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0xfdf0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.190] GetLastError () returned 0x3e5
	[0116.190] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0116.191] GetLastError () returned 0x26
	[0116.191] GetLastError () returned 0x26
	[0116.191] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.191] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.192] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0116.192] CancelIo (hFile=0x3ec) returned 1
	[0116.192] CloseHandle (hObject=0x3ec) returned 1
	[0116.193] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d508 | out: hHeap=0x5f0000) returned 1
	[0116.193] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.193] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0116.194] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x351fff0
	[0116.194] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\Db1CWzTR.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\db1cwztr.pdf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\Db1CWzTR.pdf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\db1cwztr.pdf.crypted")) returned 1
	[0116.195] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fff0 | out: hHeap=0x5f0000) returned 1
	[0116.195] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0116.195] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.214] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.214] GetLastError () returned 0x3e5
	[0116.214] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.216] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=51648 | out: Addend=0xe0dabc) returned 2249152
	[0116.216] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0116.216] GetLastError () returned 0x3e5
	[0116.216] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.216] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4045050
	[0116.216] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045460
	[0116.216] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045460 | out: hHeap=0x5f0000) returned 1
	[0116.216] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=51648) returned 1
	[0116.217] WriteFile (in: hFile=0x3ec, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.217] GetLastError () returned 0x3e5
	[0116.217] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0116.217] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.240] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=65879 | out: Addend=0xe0dacc) returned 2300639
	[0116.241] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x10160, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.241] GetLastError () returned 0x3e5
	[0116.241] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0116.242] GetLastError () returned 0x26
	[0116.242] GetLastError () returned 0x26
	[0116.242] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x49b0020) returned 1
	[0116.242] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.242] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0116.243] CancelIo (hFile=0x3e0) returned 1
	[0116.243] CloseHandle (hObject=0x3e0) returned 1
	[0116.245] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d508 | out: hHeap=0x5f0000) returned 1
	[0116.245] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0116.245] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x49b0020 | out: hHeap=0x5f0000) returned 1
	[0116.245] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0116.245] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\wilBO-ZHaF.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\wilbo-zhaf.rtf"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\wilBO-ZHaF.rtf.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\wilbo-zhaf.rtf.crypted")) returned 1
	[0116.246] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0116.246] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0116.246] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.259] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=16128 | out: Addend=0xe0dabc) returned 2366688
	[0116.259] ReadFile (in: hFile=0x3e4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.259] GetLastError () returned 0x3e5
	[0116.259] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.259] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d508
	[0116.259] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0116.260] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0116.260] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=16128) returned 1
	[0116.260] WriteFile (in: hFile=0x3e4, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.260] GetLastError () returned 0x3e5
	[0116.260] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d508 | out: hHeap=0x5f0000) returned 1
	[0116.260] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.423] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=65536 | out: Addend=0xe0dabc) returned 3038528
	[0116.423] ReadFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0116.423] GetLastError () returned 0x3e5
	[0116.423] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.423] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4047a80
	[0116.423] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x404a058
	[0116.423] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x404a058 | out: hHeap=0x5f0000) returned 1
	[0116.423] GetFileSizeEx (in: hFile=0x3f4, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=65536) returned 1
	[0116.423] WriteFile (in: hFile=0x3f4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.424] GetLastError () returned 0x3e5
	[0116.424] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047a80 | out: hHeap=0x5f0000) returned 1
	[0116.424] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.446] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4047570
	[0116.446] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x404a058
	[0116.446] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x404a058 | out: hHeap=0x5f0000) returned 1
	[0116.446] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=73408) returned 1
	[0116.446] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0116.446] GetLastError () returned 0x3e5
	[0116.446] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047570 | out: hHeap=0x5f0000) returned 1
	[0116.446] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.519] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=98768 | out: Addend=0xe0dabc) returned 3447552
	[0116.519] ReadFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0116.519] GetLastError () returned 0x3e5
	[0116.519] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.519] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4047570
	[0116.519] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4049050
	[0116.519] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4049050 | out: hHeap=0x5f0000) returned 1
	[0116.519] GetFileSizeEx (in: hFile=0x3f4, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=98768) returned 1
	[0116.520] WriteFile (in: hFile=0x3f4, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.520] GetLastError () returned 0x3e5
	[0116.520] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047570 | out: hHeap=0x5f0000) returned 1
	[0116.520] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.539] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=20064 | out: Addend=0xe0dabc) returned 3546320
	[0116.539] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0116.539] GetLastError () returned 0x3e5
	[0116.539] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.540] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0116.540] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0116.540] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0116.540] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=20064) returned 1
	[0116.540] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.540] GetLastError () returned 0x3e5
	[0116.540] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0116.540] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.562] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=97744 | out: Addend=0xe0dabc) returned 3566384
	[0116.562] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0116.562] GetLastError () returned 0x3e5
	[0116.562] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.562] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0116.562] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0116.562] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0116.562] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=97744) returned 1
	[0116.563] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.563] GetLastError () returned 0x3e5
	[0116.563] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0116.563] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.583] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=70016 | out: Addend=0xe0dabc) returned 0
	[0116.583] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0116.583] GetLastError () returned 0x3e5
	[0116.584] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0116.584] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0116.584] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0116.584] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0116.584] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=70016) returned 1
	[0116.584] WriteFile (in: hFile=0x38c, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0116.584] GetLastError () returned 0x3e5
	[0116.584] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0116.584] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.492] ReadFile (in: hFile=0x3c4, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0118.493] GetLastError () returned 0x3e5
	[0118.493] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.500] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=42800 | out: Addend=0xe0dabc) returned 8832464
	[0118.501] ReadFile (in: hFile=0x3e4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0118.501] GetLastError () returned 0x3e5
	[0118.501] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0118.502] GetLastError () returned 0x26
	[0118.502] GetLastError () returned 0x26
	[0118.502] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0118.503] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.505] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0118.506] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4049050
	[0118.506] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4049050 | out: hHeap=0x5f0000) returned 1
	[0118.506] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=51792) returned 1
	[0118.506] WriteFile (in: hFile=0x3f8, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0118.506] GetLastError () returned 0x3e5
	[0118.506] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0118.506] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.531] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043320
	[0118.531] CancelIo (hFile=0x378) returned 1
	[0118.531] CloseHandle (hObject=0x378) returned 1
	[0118.538] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0118.538] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043238 | out: hHeap=0x5f0000) returned 1
	[0118.538] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4bb0020 | out: hHeap=0x5f0000) returned 1
	[0118.539] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0118.539] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\y-rp-EXZ-yK.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\y-rp-exz-yk.mp3"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\y-rp-EXZ-yK.mp3.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\y-rp-exz-yk.mp3.crypted")) returned 1
	[0118.540] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0118.540] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043320 | out: hHeap=0x5f0000) returned 1
	[0118.540] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.549] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=81200 | out: Addend=0xe0dabc) returned 9141200
	[0118.549] ReadFile (in: hFile=0x3dc, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0118.550] GetLastError () returned 0x3e5
	[0118.550] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.550] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4047a80
	[0118.550] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4046058
	[0118.550] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4046058 | out: hHeap=0x5f0000) returned 1
	[0118.550] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=81200) returned 1
	[0118.550] WriteFile (in: hFile=0x3dc, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0118.551] GetLastError () returned 0x3e5
	[0118.551] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4047a80 | out: hHeap=0x5f0000) returned 1
	[0118.551] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.568] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 9713920
	[0118.568] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.591] GetLastError () returned 0x3e5
	[0118.591] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.604] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10205440
	[0118.604] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.606] GetLastError () returned 0x3e5
	[0118.606] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.613] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0118.613] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.614] GetLastError () returned 0x3e5
	[0118.614] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.622] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0118.622] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.645] GetLastError () returned 0x3e5
	[0118.645] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.654] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0118.654] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.655] GetLastError () returned 0x3e5
	[0118.655] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.665] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1474560
	[0118.665] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0118.689] GetLastError () returned 0x3e5
	[0118.689] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0118.856] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2305296
	[0118.856] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0119.041] GetLastError () returned 0x3e5
	[0119.041] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.043] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=49635 | out: Addend=0xe0dacc) returned 6728948
	[0119.044] WriteFile (in: hFile=0x37c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xc1f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.044] GetLastError () returned 0x3e5
	[0119.044] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0119.045] GetLastError () returned 0x26
	[0119.045] GetLastError () returned 0x26
	[0119.045] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.045] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.046] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043150
	[0119.046] CancelIo (hFile=0x37c) returned 1
	[0119.046] CloseHandle (hObject=0x37c) returned 1
	[0119.049] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0119.049] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043320 | out: hHeap=0x5f0000) returned 1
	[0119.049] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.050] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0119.050] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\rnMfNsBIAlEfp.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\rnmfnsbialefp.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\rnMfNsBIAlEfp.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\rnmfnsbialefp.wav.crypted")) returned 1
	[0119.051] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0119.051] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043150 | out: hHeap=0x5f0000) returned 1
	[0119.051] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.069] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=80093 | out: Addend=0xe0dacc) returned 6778583
	[0119.070] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x138e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.071] GetLastError () returned 0x3e5
	[0119.071] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0119.071] GetLastError () returned 0x26
	[0119.071] GetLastError () returned 0x26
	[0119.071] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.071] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.072] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0119.072] CancelIo (hFile=0x38c) returned 1
	[0119.072] CloseHandle (hObject=0x38c) returned 1
	[0119.077] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0119.077] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0119.077] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.077] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0119.077] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\Luk8dAY_.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\luk8day_.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\Luk8dAY_.m4a.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\luk8day_.m4a.crypted")) returned 1
	[0119.078] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0119.078] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0119.078] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.104] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.105] GetLastError () returned 0x3e5
	[0119.105] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.106] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=41968 | out: Addend=0xe0dabc) returned 6858720
	[0119.106] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.106] GetLastError () returned 0x3e5
	[0119.106] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.106] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0119.106] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0119.106] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0119.106] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=41968) returned 1
	[0119.106] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.106] GetLastError () returned 0x3e5
	[0119.106] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.106] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.123] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=41696 | out: Addend=0xe0dacc) returned 6900644
	[0119.124] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0xa2e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.125] GetLastError () returned 0x3e5
	[0119.125] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0119.125] GetLastError () returned 0x26
	[0119.125] GetLastError () returned 0x26
	[0119.125] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.125] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.126] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0119.126] CancelIo (hFile=0x38c) returned 1
	[0119.126] CloseHandle (hObject=0x38c) returned 1
	[0119.127] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0119.127] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0119.127] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.128] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0119.128] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\q_ZFszPd-Qz67G.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\q_zfszpd-qz67g.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\q_ZFszPd-Qz67G.m4a.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\q_zfszpd-qz67g.m4a.crypted")) returned 1
	[0119.130] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618f88 | out: hHeap=0x5f0000) returned 1
	[0119.130] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0119.130] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.149] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.149] GetLastError () returned 0x3e5
	[0119.149] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.150] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=25488 | out: Addend=0xe0dabc) returned 6942384
	[0119.150] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.150] GetLastError () returned 0x3e5
	[0119.150] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.151] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0119.151] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0119.151] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0119.151] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=25488) returned 1
	[0119.151] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.151] GetLastError () returned 0x3e5
	[0119.151] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.151] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.172] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=5274 | out: Addend=0xe0dacc) returned 6967825
	[0119.172] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.172] GetLastError () returned 0x3e5
	[0119.172] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0119.173] GetLastError () returned 0x26
	[0119.173] GetLastError () returned 0x26
	[0119.173] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.173] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.173] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0119.173] CancelIo (hFile=0x38c) returned 1
	[0119.173] CloseHandle (hObject=0x38c) returned 1
	[0119.175] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0119.175] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0119.175] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.175] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0119.175] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\1dmWA6r9Nh7wG.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\1dmwa6r9nh7wg.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\1dmWA6r9Nh7wG.m4a.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\1dmwa6r9nh7wg.m4a.crypted")) returned 1
	[0119.176] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0119.176] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522cd8 | out: hHeap=0x5f0000) returned 1
	[0119.176] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.190] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.190] GetLastError () returned 0x3e5
	[0119.190] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.192] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=75056 | out: Addend=0xe0dabc) returned 6973152
	[0119.192] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.192] GetLastError () returned 0x3e5
	[0119.192] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.192] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0119.193] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0119.193] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0119.193] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=75056) returned 1
	[0119.193] WriteFile (in: hFile=0x38c, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.193] GetLastError () returned 0x3e5
	[0119.193] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.193] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.241] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7539660
	[0119.247] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.251] GetLastError () returned 0x3e5
	[0119.251] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.251] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8031180
	[0119.256] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.257] GetLastError () returned 0x3e5
	[0119.257] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.283] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8522700
	[0119.291] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.294] GetLastError () returned 0x3e5
	[0119.294] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.295] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9014220
	[0119.302] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.304] GetLastError () returned 0x3e5
	[0119.304] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.304] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9505740
	[0119.311] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.313] GetLastError () returned 0x3e5
	[0119.313] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.341] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9997260
	[0119.348] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.351] GetLastError () returned 0x3e5
	[0119.351] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.352] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10488780
	[0119.359] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.360] GetLastError () returned 0x3e5
	[0119.360] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.383] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10980300
	[0119.390] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0119.393] GetLastError () returned 0x3e5
	[0119.393] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.543] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 11657328
	[0119.549] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0119.777] GetLastError () returned 0x3e5
	[0119.777] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.777] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=11319 | out: Addend=0xe0dacc) returned 2949120
	[0119.778] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x2c40, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.778] GetLastError () returned 0x3e5
	[0119.778] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0119.778] GetLastError () returned 0x26
	[0119.778] GetLastError () returned 0x26
	[0119.778] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.778] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.780] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0119.780] CancelIo (hFile=0x3e0) returned 1
	[0119.780] CloseHandle (hObject=0x3e0) returned 1
	[0119.781] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.781] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0119.781] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.782] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0119.782] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\PuM-ucRL1l_Qt-4l.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\pum-ucrl1l_qt-4l.wav"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\PuM-ucRL1l_Qt-4l.wav.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\pum-ucrl1l_qt-4l.wav.crypted")) returned 1
	[0119.783] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0119.783] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0119.783] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.804] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=31044 | out: Addend=0xe0dacc) returned 2960439
	[0119.804] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x7950, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.805] GetLastError () returned 0x3e5
	[0119.805] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0119.805] GetLastError () returned 0x26
	[0119.805] GetLastError () returned 0x26
	[0119.805] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0119.805] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.806] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0119.806] CancelIo (hFile=0x3d8) returned 1
	[0119.806] CloseHandle (hObject=0x3d8) returned 1
	[0119.809] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0119.809] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0119.809] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0119.809] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0119.809] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\S9k76DxGawRsOI.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\s9k76dxgawrsoi.m4a"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\S9k76DxGawRsOI.m4a.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\s9k76dxgawrsoi.m4a.crypted")) returned 1
	[0119.810] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0119.810] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0119.810] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.828] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.828] GetLastError () returned 0x3e5
	[0119.828] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.829] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=30752 | out: Addend=0xe0dabc) returned 2991504
	[0119.829] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.829] GetLastError () returned 0x3e5
	[0119.829] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.829] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0119.830] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0119.830] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0119.830] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=30752) returned 1
	[0119.830] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.830] GetLastError () returned 0x3e5
	[0119.830] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0119.830] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.861] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=32 | out: Addend=0xe0dabc) returned 3022256
	[0119.861] ReadFile (in: hFile=0x3bc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0119.861] GetLastError () returned 0x3e5
	[0119.861] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.861] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0119.861] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0119.862] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0119.862] GetFileSizeEx (in: hFile=0x3bc, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=32) returned 1
	[0119.874] WriteFile (in: hFile=0x3bc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0119.874] GetLastError () returned 0x3e5
	[0119.874] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0119.874] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0119.999] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=36481 | out: Addend=0xe0dacc) returned 3022248
	[0119.999] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x8e90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.000] GetLastError () returned 0x3e5
	[0120.000] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0120.000] GetLastError () returned 0x26
	[0120.000] GetLastError () returned 0x26
	[0120.000] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0120.000] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.001] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0120.001] CancelIo (hFile=0x3d8) returned 1
	[0120.001] CloseHandle (hObject=0x3d8) returned 1
	[0120.003] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0120.003] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0120.003] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0120.004] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0120.004] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3OsNwneKQKhgA6sbZ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3osnwnekqkhga6sbz.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3OsNwneKQKhgA6sbZ.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3osnwnekqkhga6sbz.gif.crypted")) returned 1
	[0120.005] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0120.005] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0120.005] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.023] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0120.023] GetLastError () returned 0x3e5
	[0120.023] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.024] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=21232 | out: Addend=0xe0dabc) returned 3058784
	[0120.024] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0120.024] GetLastError () returned 0x3e5
	[0120.024] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.025] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0120.025] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.025] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.025] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=21232) returned 1
	[0120.025] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.025] GetLastError () returned 0x3e5
	[0120.025] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0120.025] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.042] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3571536
	[0120.042] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.042] GetLastError () returned 0x3e5
	[0120.042] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.052] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4063056
	[0120.052] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.078] GetLastError () returned 0x3e5
	[0120.078] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.088] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4554576
	[0120.088] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.088] GetLastError () returned 0x3e5
	[0120.088] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.097] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5046096
	[0120.097] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.144] GetLastError () returned 0x3e5
	[0120.144] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.154] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5537616
	[0120.154] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.154] GetLastError () returned 0x3e5
	[0120.154] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.164] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6029136
	[0120.164] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.214] GetLastError () returned 0x3e5
	[0120.214] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.226] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6520656
	[0120.226] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0120.227] GetLastError () returned 0x3e5
	[0120.227] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.346] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0120.347] GetLastError () returned 0x3e5
	[0120.347] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.352] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=19654 | out: Addend=0xe0dacc) returned 7129306
	[0120.352] WriteFile (in: hFile=0x38c, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0120.353] GetLastError () returned 0x3e5
	[0120.353] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.355] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=69840 | out: Addend=0xe0dabc) returned 7149056
	[0120.356] ReadFile (in: hFile=0x37c, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0120.356] GetLastError () returned 0x3e5
	[0120.356] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.357] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4042558
	[0120.357] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0120.357] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0120.357] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=21856) returned 1
	[0120.357] WriteFile (in: hFile=0x3e0, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0120.357] GetLastError () returned 0x3e5
	[0120.357] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4042558 | out: hHeap=0x5f0000) returned 1
	[0120.357] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0120.371] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0120.371] CancelIo (hFile=0x3ec) returned 1
	[0120.371] CloseHandle (hObject=0x3ec) returned 1
	[0120.376] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0120.377] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0120.377] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0120.378] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0120.378] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\AVZwnLmqhlVWG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\avzwnlmqhlvwg.gif"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\AVZwnLmqhlVWG.gif.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\avzwnlmqhlvwg.gif.crypted")) returned 1
	[0120.379] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0120.379] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0120.379] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0121.361] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0121.361] GetLastError () returned 0x3e5
	[0121.361] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0121.366] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=87884 | out: Addend=0xe0dacc) returned 5199669
	[0121.367] WriteFile (in: hFile=0x3e0, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x15750, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0121.367] GetLastError () returned 0x3e5
	[0121.367] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0121.371] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=12144 | out: Addend=0xe0dabc) returned 5779120
	[0121.371] ReadFile (in: hFile=0x3c4, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 0x0
	[0121.371] GetLastError () returned 0x3e5
	[0121.371] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0121.372] GetLastError () returned 0x26
	[0121.372] GetLastError () returned 0x26
	[0121.372] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4cb0020) returned 1
	[0121.372] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0121.377] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0121.377] CancelIo (hFile=0x37c) returned 1
	[0121.377] CloseHandle (hObject=0x37c) returned 1
	[0121.380] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0121.381] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0121.381] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0121.381] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0121.381] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\khSfucv4zehuFjlWpnQP.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\khsfucv4zehufjlwpnqp.png"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\khSfucv4zehuFjlWpnQP.png.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\khsfucv4zehufjlwpnqp.png.crypted")) returned 1
	[0121.382] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0121.383] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522fb8 | out: hHeap=0x5f0000) returned 1
	[0121.383] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0122.360] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=2001 | out: Addend=0xe0dacc) returned 4699970
	[0122.360] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0122.360] GetLastError () returned 0x3e5
	[0122.360] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0122.364] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=82256 | out: Addend=0xe0dabc) returned 4702032
	[0122.364] ReadFile (in: hFile=0x3ec, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0122.364] GetLastError () returned 0x3e5
	[0122.364] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0122.365] GetLastError () returned 0x26
	[0122.365] GetLastError () returned 0x26
	[0122.365] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4bb0020) returned 1
	[0122.366] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0122.369] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0122.369] CancelIo (hFile=0x378) returned 1
	[0122.369] CloseHandle (hObject=0x378) returned 1
	[0122.373] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0122.373] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0122.373] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0122.857] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0122.857] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\hIbWzD.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\hibwzd.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\hIbWzD.mkv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\hibwzd.mkv.crypted")) returned 1
	[0122.858] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0122.858] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0122.858] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0122.867] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 50672
	[0122.867] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.869] GetLastError () returned 0x3e5
	[0122.869] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0122.875] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 542192
	[0122.875] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.888] GetLastError () returned 0x3e5
	[0122.888] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0122.894] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1033712
	[0122.894] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.896] GetLastError () returned 0x3e5
	[0122.896] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0122.903] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1525232
	[0122.903] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0122.915] GetLastError () returned 0x3e5
	[0122.915] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0122.926] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2016752
	[0122.926] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.500] GetLastError () returned 0x3e5
	[0123.500] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.510] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3645920
	[0123.510] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.530] GetLastError () returned 0x3e5
	[0123.530] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.540] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4137440
	[0123.540] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.563] GetLastError () returned 0x3e5
	[0123.563] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.571] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4671104
	[0123.571] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.585] GetLastError () returned 0x3e5
	[0123.585] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.595] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5162624
	[0123.595] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.637] GetLastError () returned 0x3e5
	[0123.638] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.654] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5749312
	[0123.654] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.675] GetLastError () returned 0x3e5
	[0123.675] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.682] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6240832
	[0123.682] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.683] GetLastError () returned 0x3e5
	[0123.683] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.689] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6732352
	[0123.689] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0123.702] GetLastError () returned 0x3e5
	[0123.702] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.728] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0123.729] GetLastError () returned 0x3e5
	[0123.729] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.730] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=53712 | out: Addend=0xe0dabc) returned 7223872
	[0123.730] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0123.730] GetLastError () returned 0x3e5
	[0123.730] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0123.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0123.731] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0123.731] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=53712) returned 1
	[0123.731] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.731] GetLastError () returned 0x3e5
	[0123.731] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0123.731] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.738] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=82368 | out: Addend=0xe0dabc) returned 7277584
	[0123.738] ReadFile (in: hFile=0x378, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.738] GetLastError () returned 0x3e5
	[0123.738] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.739] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0123.739] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0123.739] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0123.739] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=82368) returned 1
	[0123.739] WriteFile (in: hFile=0x378, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.739] GetLastError () returned 0x3e5
	[0123.739] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0123.739] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.779] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=98943 | out: Addend=0xe0dacc) returned 7359759
	[0123.781] WriteFile (in: hFile=0x3e0, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x18280, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.782] GetLastError () returned 0x3e5
	[0123.782] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0123.782] GetLastError () returned 0x26
	[0123.782] GetLastError () returned 0x26
	[0123.782] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0123.782] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.783] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0123.783] CancelIo (hFile=0x3e0) returned 1
	[0123.783] CloseHandle (hObject=0x3e0) returned 1
	[0123.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0123.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0123.787] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0123.787] MoveFileW (lpExistingFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\SgVC1NERzDGqOHLP.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\sgvc1nerzdgqohlp.mkv"), lpNewFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\SgVC1NERzDGqOHLP.mkv.crypted" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\sgvc1nerzdgqohlp.mkv.crypted")) returned 1
	[0123.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0123.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0123.788] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.812] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0123.812] GetLastError () returned 0x3e5
	[0123.812] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.814] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=32544 | out: Addend=0xe0dabc) returned 7458896
	[0123.814] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0123.814] GetLastError () returned 0x3e5
	[0123.814] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.814] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d7f0
	[0123.814] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0123.814] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0123.814] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=32544) returned 1
	[0123.815] WriteFile (in: hFile=0x3dc, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0123.815] GetLastError () returned 0x3e5
	[0123.815] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d7f0 | out: hHeap=0x5f0000) returned 1
	[0123.815] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.824] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=66576 | out: Addend=0xe0dabc) returned 7491440
	[0123.824] ReadFile (in: hFile=0x378, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.824] GetLastError () returned 0x3e5
	[0123.824] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.825] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0123.825] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0123.825] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0123.825] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=66576) returned 1
	[0123.825] WriteFile (in: hFile=0x378, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.825] GetLastError () returned 0x3e5
	[0123.825] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0123.825] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.874] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=68384 | out: Addend=0xe0dabc) returned 0
	[0123.874] ReadFile (in: hFile=0x3bc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.874] GetLastError () returned 0x3e5
	[0123.875] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.875] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0123.875] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0123.875] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0123.875] GetFileSizeEx (in: hFile=0x3bc, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=68384) returned 1
	[0123.875] WriteFile (in: hFile=0x3bc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0123.876] GetLastError () returned 0x3e5
	[0123.876] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0123.876] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.903] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 559904
	[0123.904] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.905] GetLastError () returned 0x3e5
	[0123.905] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.914] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1051424
	[0123.914] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.956] GetLastError () returned 0x3e5
	[0123.956] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.966] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1542944
	[0123.966] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0123.968] GetLastError () returned 0x3e5
	[0123.968] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0123.977] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2034464
	[0123.977] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.001] GetLastError () returned 0x3e5
	[0124.001] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.011] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2525984
	[0124.011] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.012] GetLastError () returned 0x3e5
	[0124.012] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.021] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3017504
	[0124.021] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.045] GetLastError () returned 0x3e5
	[0124.045] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.056] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3509024
	[0124.056] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.058] GetLastError () returned 0x3e5
	[0124.058] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.068] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4000544
	[0124.068] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.092] GetLastError () returned 0x3e5
	[0124.092] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.103] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4492064
	[0124.103] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.105] GetLastError () returned 0x3e5
	[0124.105] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.114] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4983584
	[0124.114] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.139] GetLastError () returned 0x3e5
	[0124.139] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.366] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5475488
	[0124.366] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0124.451] GetLastError () returned 0x3e5
	[0124.451] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.472] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 7441541
	[0124.472] WriteFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 0
	[0124.475] GetLastError () returned 0x3e5
	[0124.475] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.506] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 7441674
	[0124.537] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0124.729] GetLastError () returned 0x3e5
	[0124.729] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.839] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 11865392
	[0124.839] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0124.839] GetLastError () returned 0x3e5
	[0124.839] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.840] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0124.840] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0124.840] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0124.840] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=144) returned 1
	[0124.840] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0124.841] GetLastError () returned 0x3e5
	[0124.841] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0124.841] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.866] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 0
	[0124.866] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0124.866] GetLastError () returned 0x3e5
	[0124.866] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.867] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0124.867] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0124.867] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0124.867] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=144) returned 1
	[0124.867] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0124.867] GetLastError () returned 0x3e5
	[0124.867] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0124.867] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.890] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 144
	[0124.890] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0124.890] GetLastError () returned 0x3e5
	[0124.890] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.891] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0124.891] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0124.891] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0124.891] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=144) returned 1
	[0124.891] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0124.892] GetLastError () returned 0x3e5
	[0124.892] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0124.892] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.919] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 491787
	[0124.927] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.929] GetLastError () returned 0x3e5
	[0124.929] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.971] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 983307
	[0124.978] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.981] GetLastError () returned 0x3e5
	[0124.981] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0124.984] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1474827
	[0124.991] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0124.993] GetLastError () returned 0x3e5
	[0124.993] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.022] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 1966347
	[0125.030] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0125.034] GetLastError () returned 0x3e5
	[0125.034] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.054] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 1966368
	[0125.054] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0125.054] GetLastError () returned 0x3e5
	[0125.054] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.055] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0125.055] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0125.055] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0125.055] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=144) returned 1
	[0125.055] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.055] GetLastError () returned 0x3e5
	[0125.055] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0125.056] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.085] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2458032
	[0125.085] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.113] GetLastError () returned 0x3e5
	[0125.113] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.127] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2949552
	[0125.127] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.129] GetLastError () returned 0x3e5
	[0125.129] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.139] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3441072
	[0125.140] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0125.513] GetLastError () returned 0x3e5
	[0125.513] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.518] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=133 | out: Addend=0xe0dacc) returned 8848026
	[0125.518] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.519] GetLastError () returned 0x3e5
	[0125.519] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0125.519] GetLastError () returned 0x26
	[0125.519] GetLastError () returned 0x26
	[0125.519] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0125.519] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.521] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0125.521] CancelIo (hFile=0x3d8) returned 1
	[0125.521] CloseHandle (hObject=0x3d8) returned 1
	[0125.521] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0125.521] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0125.521] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0125.522] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0125.522] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url.crypted" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url.crypted")) returned 1
	[0125.523] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0125.523] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0125.523] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.527] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 8848159
	[0125.534] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.536] GetLastError () returned 0x3e5
	[0125.536] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.562] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9339679
	[0125.569] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.572] GetLastError () returned 0x3e5
	[0125.572] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.574] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 9831199
	[0125.581] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.583] GetLastError () returned 0x3e5
	[0125.583] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.624] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 10322784
	[0125.624] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0125.625] GetLastError () returned 0x3e5
	[0125.625] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.625] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0125.625] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0125.625] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0125.625] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=144) returned 1
	[0125.625] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.626] GetLastError () returned 0x3e5
	[0125.626] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0125.626] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.673] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10322928
	[0125.673] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.675] GetLastError () returned 0x3e5
	[0125.675] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.686] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 10814448
	[0125.686] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.704] GetLastError () returned 0x3e5
	[0125.704] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.715] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 11305968
	[0125.715] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.716] GetLastError () returned 0x3e5
	[0125.716] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.725] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 11797488
	[0125.725] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.761] GetLastError () returned 0x3e5
	[0125.761] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.774] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 12289008
	[0125.774] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.776] GetLastError () returned 0x3e5
	[0125.776] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.785] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 12780528
	[0125.785] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.787] GetLastError () returned 0x3e5
	[0125.787] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.796] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 13272048
	[0125.796] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0125.819] GetLastError () returned 0x3e5
	[0125.819] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.822] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=144 | out: Addend=0xe0dabc) returned 13763568
	[0125.822] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0125.822] GetLastError () returned 0x3e5
	[0125.823] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.823] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0125.823] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0125.823] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0125.823] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=144) returned 1
	[0125.823] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.824] GetLastError () returned 0x3e5
	[0125.824] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0125.824] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.879] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=480 | out: Addend=0xe0dabc) returned 14255232
	[0125.879] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0125.879] GetLastError () returned 0x3e5
	[0125.879] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0125.879] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0125.879] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0125.879] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0125.880] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=480) returned 1
	[0125.880] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0125.880] GetLastError () returned 0x3e5
	[0125.880] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0125.880] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.053] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0126.053] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.077] GetLastError () returned 0x3e5
	[0126.077] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.086] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 491520
	[0126.086] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.092] GetLastError () returned 0x3e5
	[0126.092] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.101] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0126.101] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0126.222] GetLastError () returned 0x3e5
	[0126.222] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.249] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=20 | out: Addend=0xe0dacc) returned 1967337
	[0126.249] WriteFile (in: hFile=0x3d8, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.249] GetLastError () returned 0x3e5
	[0126.249] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0126.250] GetLastError () returned 0x26
	[0126.250] GetLastError () returned 0x26
	[0126.250] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0126.250] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.250] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.250] CancelIo (hFile=0x3d8) returned 1
	[0126.251] CloseHandle (hObject=0x3d8) returned 1
	[0126.251] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0126.251] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.251] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0126.251] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.251] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), lpNewFileName="C:\\\\Users\\Default\\ntuser.ini.crypted" (normalized: "c:\\users\\default\\ntuser.ini.crypted")) returned 1
	[0126.252] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0126.252] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.252] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.295] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=248 | out: Addend=0xe0dacc) returned 1967357
	[0126.295] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.295] GetLastError () returned 0x3e5
	[0126.295] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0126.296] GetLastError () returned 0x26
	[0126.296] GetLastError () returned 0x26
	[0126.296] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0126.296] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.297] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0126.297] CancelIo (hFile=0x3dc) returned 1
	[0126.297] CloseHandle (hObject=0x3dc) returned 1
	[0126.297] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0126.297] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0126.297] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0126.297] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0126.298] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms"), lpNewFileName="C:\\\\Users\\Default\\Searches\\Everywhere.search-ms.crypted" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms.crypted")) returned 1
	[0126.298] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0126.298] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0126.298] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.314] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=248 | out: Addend=0xe0dacc) returned 1967605
	[0126.314] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.314] GetLastError () returned 0x3e5
	[0126.314] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0126.314] GetLastError () returned 0x26
	[0126.314] GetLastError () returned 0x26
	[0126.314] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0126.314] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.315] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0126.315] CancelIo (hFile=0x3dc) returned 1
	[0126.316] CloseHandle (hObject=0x3dc) returned 1
	[0126.316] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0126.316] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0126.316] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0126.317] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0126.317] MoveFileW (lpExistingFileName="C:\\\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms"), lpNewFileName="C:\\\\Users\\Default\\Searches\\Indexed Locations.search-ms.crypted" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms.crypted")) returned 1
	[0126.318] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0126.318] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0126.318] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.350] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0126.350] GetLastError () returned 0x3e5
	[0126.350] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.350] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=2032 | out: Addend=0xe0dabc) returned 1967888
	[0126.350] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0126.350] GetLastError () returned 0x3e5
	[0126.350] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.351] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0126.351] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0126.351] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0126.351] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=2032) returned 1
	[0126.351] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.352] GetLastError () returned 0x3e5
	[0126.352] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0126.352] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.430] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=2257 | out: Addend=0xe0dacc) returned 1969878
	[0126.430] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.431] GetLastError () returned 0x3e5
	[0126.431] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0126.431] GetLastError () returned 0x26
	[0126.431] GetLastError () returned 0x26
	[0126.431] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0126.431] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.432] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0126.432] CancelIo (hFile=0x3dc) returned 1
	[0126.432] CloseHandle (hObject=0x3dc) returned 1
	[0126.432] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0126.433] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0126.433] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4650020 | out: hHeap=0x5f0000) returned 1
	[0126.433] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0126.433] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), lpNewFileName="C:\\\\Users\\Public\\Desktop\\Google Chrome.lnk.crypted" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk.crypted")) returned 1
	[0126.434] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0126.434] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0126.434] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.452] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0126.453] GetLastError () returned 0x3e5
	[0126.453] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.453] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=1168 | out: Addend=0xe0dabc) returned 1972192
	[0126.453] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0126.453] GetLastError () returned 0x3e5
	[0126.453] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.453] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351d2e0
	[0126.453] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4080850
	[0126.454] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0126.454] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=1168) returned 1
	[0126.454] WriteFile (in: hFile=0x3dc, lpBuffer=0x4650054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4650020) returned 1
	[0126.454] GetLastError () returned 0x3e5
	[0126.454] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0126.454] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.501] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 1973360
	[0126.501] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.537] GetLastError () returned 0x3e5
	[0126.537] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.549] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2464880
	[0126.549] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.550] GetLastError () returned 0x3e5
	[0126.550] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.563] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2956400
	[0126.563] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.588] GetLastError () returned 0x3e5
	[0126.588] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.599] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3447920
	[0126.599] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.600] GetLastError () returned 0x3e5
	[0126.600] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.609] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 3939440
	[0126.609] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.633] GetLastError () returned 0x3e5
	[0126.633] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.644] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4430960
	[0126.644] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.645] GetLastError () returned 0x3e5
	[0126.645] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.655] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 4922480
	[0126.655] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.684] GetLastError () returned 0x3e5
	[0126.685] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.774] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5414880
	[0126.774] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.782] GetLastError () returned 0x3e5
	[0126.782] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.788] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5906400
	[0126.788] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0126.790] GetLastError () returned 0x3e5
	[0126.790] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.841] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6397920
	[0126.841] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.870] GetLastError () returned 0x3e5
	[0126.870] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.887] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6889440
	[0126.887] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.888] GetLastError () returned 0x3e5
	[0126.888] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.906] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 0
	[0126.906] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0126.935] GetLastError () returned 0x3e5
	[0126.935] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0126.976] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0126.976] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0126.978] GetLastError () returned 0x3e5
	[0126.978] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0127.262] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5898240
	[0127.262] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 0x0
	[0127.528] GetLastError () returned 0x3e5
	[0127.528] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0127.544] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 10813440
	[0127.552] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0127.555] GetLastError () returned 0x3e5
	[0127.555] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0127.564] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 11304960
	[0127.571] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0127.573] GetLastError () returned 0x3e5
	[0127.573] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0127.609] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 11304960
	[0127.609] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.610] GetLastError () returned 0x3e5
	[0127.611] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0127.620] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=418912 | out: Addend=0xe0dabc) returned 11796480
	[0127.620] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0127.620] GetLastError () returned 0x3e5
	[0127.620] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0127.620] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x4080850
	[0127.620] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x671788
	[0127.620] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671788 | out: hHeap=0x5f0000) returned 1
	[0127.620] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=4842592) returned 1
	[0127.621] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0127.621] GetLastError () returned 0x3e5
	[0127.621] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080850 | out: hHeap=0x5f0000) returned 1
	[0127.621] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0128.799] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7554528
	[0128.799] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0128.867] GetLastError () returned 0x3e5
	[0128.867] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0128.884] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 8596192
	[0128.884] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0129.192] GetLastError () returned 0x3e5
	[0129.192] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0129.199] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=354432 | out: Addend=0xe0dabc) returned 1474560
	[0129.199] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0129.199] GetLastError () returned 0x3e5
	[0129.199] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0129.200] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x6721a8
	[0129.200] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0129.200] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0129.200] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=845952) returned 1
	[0129.200] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0129.200] GetLastError () returned 0x3e5
	[0129.200] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6721a8 | out: hHeap=0x5f0000) returned 1
	[0129.200] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0129.363] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 2604704
	[0129.363] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0129.436] GetLastError () returned 0x3e5
	[0129.436] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0129.436] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=289311 | out: Addend=0xe0dacc) returned 4079243
	[0129.439] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x46a20, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0129.440] GetLastError () returned 0x3e5
	[0129.440] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0129.440] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=289312 | out: Addend=0xe0dabc) returned 4079264
	[0129.440] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0129.440] GetLastError () returned 0x3e5
	[0129.440] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0129.440] GetLastError () returned 0x26
	[0129.440] GetLastError () returned 0x26
	[0129.440] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4750020) returned 1
	[0129.440] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0129.440] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x6726b8
	[0129.440] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x4045050
	[0129.441] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4045050 | out: hHeap=0x5f0000) returned 1
	[0129.441] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=780832) returned 1
	[0129.441] WriteFile (in: hFile=0x378, lpBuffer=0x4750054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4750020) returned 1
	[0129.441] GetLastError () returned 0x3e5
	[0129.441] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6726b8 | out: hHeap=0x5f0000) returned 1
	[0129.441] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0129.441] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0129.441] CancelIo (hFile=0x378) returned 1
	[0129.441] CloseHandle (hObject=0x378) returned 1
	[0129.441] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351d2e0 | out: hHeap=0x5f0000) returned 1
	[0129.441] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0129.441] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4750020 | out: hHeap=0x5f0000) returned 1
	[0129.442] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0129.442] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.crypted" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.crypted")) returned 1
	[0129.442] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0129.442] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0129.442] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0129.499] GetLastError () returned 0x26
	[0129.499] GetLastError () returned 0x26
	[0129.499] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4650020) returned 1
	[0129.499] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0129.512] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=129368 | out: Addend=0xe0dacc) returned 5637909
	[0129.515] WriteFile (in: hFile=0x3e0, lpBuffer=0x49b0054*, nNumberOfBytesToWrite=0x1f960, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x49b0020) returned 1
	[0129.515] GetLastError () returned 0x3e5
	[0129.515] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0129.542] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5767312
	[0129.542] ReadFile (in: hFile=0x3ec, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0129.569] GetLastError () returned 0x3e5
	[0129.569] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0129.572] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=103776 | out: Addend=0xe0dabc) returned 7241872
	[0129.572] ReadFile (in: hFile=0x3ec, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0129.572] GetLastError () returned 0x3e5
	[0129.572] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0129.573] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x403) returned 0x351cdd0
	[0129.573] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x121e) returned 0x66b168
	[0129.573] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x66b168 | out: hHeap=0x5f0000) returned 1
	[0129.573] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x2d3f7d0 | out: lpFileSize=0x2d3f7d0*=595296) returned 1
	[0129.573] WriteFile (in: hFile=0x3ec, lpBuffer=0x4ab0054*, nNumberOfBytesToWrite=0x40c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4ab0020) returned 1
	[0129.573] GetLastError () returned 0x3e5
	[0129.573] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351cdd0 | out: hHeap=0x5f0000) returned 1
	[0129.573] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0130.088] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 983040
	[0130.088] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0130.659] GetLastError () returned 0x3e5
	[0130.659] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0130.746] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=69756 | out: Addend=0xe0dacc) returned 5898240
	[0130.747] WriteFile (in: hFile=0x37c, lpBuffer=0x4bb0054*, nNumberOfBytesToWrite=0x11080, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4bb0020) returned 1
	[0130.747] GetLastError () returned 0x3e5
	[0130.747] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 0
	[0130.748] GetLastError () returned 0x26
	[0130.748] GetLastError () returned 0x26
	[0130.748] PostQueuedCompletionStatus (CompletionPort=0xc8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x4bb0020) returned 1
	[0130.748] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0130.749] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0130.749] CancelIo (hFile=0x37c) returned 1
	[0130.749] CloseHandle (hObject=0x37c) returned 1
	[0130.749] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x671c98 | out: hHeap=0x5f0000) returned 1
	[0130.749] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0130.749] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4bb0020 | out: hHeap=0x5f0000) returned 1
	[0130.750] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0130.750] MoveFileW (lpExistingFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), lpNewFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.crypted" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.crypted")) returned 1
	[0130.751] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0130.751] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0130.751] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0130.752] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5967996
	[0130.758] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0130.760] GetLastError () returned 0x3e5
	[0130.760] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0130.770] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6459520
	[0130.770] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0130.783] GetLastError () returned 0x3e5
	[0130.783] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0130.791] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6951040
	[0130.791] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0x0
	[0133.148] GetLastError () returned 0x3e5
	[0133.148] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0133.149] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3440640
	[0133.156] WriteFile (in: hFile=0x3ac, lpBuffer=0x48b0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x48b0020) returned 1
	[0133.157] GetLastError () returned 0x3e5
	[0133.158] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0133.196] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 3932160
	[0133.200] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.202] GetLastError () returned 0x3e5
	[0133.202] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0133.229] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4423680
	[0133.237] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.241] GetLastError () returned 0x3e5
	[0133.241] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0133.243] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 4915200
	[0133.249] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054*, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 1
	[0133.251] GetLastError () returned 0x3e5
	[0133.251] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0133.274] InterlockedExchangeAdd (in: Addend=0xe0dacc, Value=491520 | out: Addend=0xe0dacc) returned 5406720
	[0133.281] WriteFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToWrite=0x78000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesWritten=0x0, lpOverlapped=0x4cb0020) returned 0x0
	[0133.284] GetLastError () returned 0x3e5
	[0133.284] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0133.336] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5406720
	[0133.336] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.336] GetLastError () returned 0x3e5
	[0133.336] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0133.343] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 5898240
	[0133.343] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.357] GetLastError () returned 0x3e5
	[0133.357] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0133.365] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6389760
	[0133.365] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.366] GetLastError () returned 0x3e5
	[0133.366] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0133.371] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 6881280
	[0133.371] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.384] GetLastError () returned 0x3e5
	[0133.384] GetQueuedCompletionStatus (in: CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388 | out: lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c) returned 1
	[0133.403] InterlockedExchangeAdd (in: Addend=0xe0dabc, Value=491520 | out: Addend=0xe0dabc) returned 7372800
	[0133.403] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0133.405] GetLastError () returned 0x3e5
	[0133.405] GetQueuedCompletionStatus (CompletionPort=0xc8, lpNumberOfBytesTransferred=0x2d3f748, lpCompletionKey=0x2d3f7dc, lpOverlapped=0x2d3f73c, dwMilliseconds=0x1388) 

Thread:
	id = 10
	os_tid = 0x414

	[0057.816] Sleep (dwMilliseconds=0x3e8) 
	[0070.233] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0070.234] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0070.236] Sleep (dwMilliseconds=0x3e8) 
	[0071.450] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0071.450] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0071.451] Sleep (dwMilliseconds=0x3e8) 
	[0072.555] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0072.555] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0072.569] Sleep (dwMilliseconds=0x3e8) 
	[0074.041] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0074.041] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0074.265] Sleep (dwMilliseconds=0x3e8) 
	[0075.271] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0075.271] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0075.274] Sleep (dwMilliseconds=0x3e8) 
	[0076.401] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0076.401] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0076.405] Sleep (dwMilliseconds=0x3e8) 
	[0077.636] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0077.636] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0077.895] Sleep (dwMilliseconds=0x3e8) 
	[0079.149] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0079.149] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0079.151] Sleep (dwMilliseconds=0x3e8) 
	[0080.305] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0080.305] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0080.307] Sleep (dwMilliseconds=0x3e8) 
	[0081.394] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0081.394] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0081.396] Sleep (dwMilliseconds=0x3e8) 
	[0082.401] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0082.401] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0082.402] Sleep (dwMilliseconds=0x3e8) 
	[0083.899] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0083.899] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0083.902] Sleep (dwMilliseconds=0x3e8) 
	[0085.077] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0085.077] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0085.081] Sleep (dwMilliseconds=0x3e8) 
	[0086.184] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0086.184] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0086.189] Sleep (dwMilliseconds=0x3e8) 
	[0087.190] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0087.190] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0087.191] Sleep (dwMilliseconds=0x3e8) 
	[0088.474] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0088.474] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0088.477] Sleep (dwMilliseconds=0x3e8) 
	[0089.572] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0089.572] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0089.574] Sleep (dwMilliseconds=0x3e8) 
	[0090.615] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0090.615] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0090.617] Sleep (dwMilliseconds=0x3e8) 
	[0091.660] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0091.708] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0091.710] Sleep (dwMilliseconds=0x3e8) 
	[0093.041] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0093.044] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0093.061] Sleep (dwMilliseconds=0x3e8) 
	[0094.140] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0094.140] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0094.167] Sleep (dwMilliseconds=0x3e8) 
	[0095.177] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0095.177] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0095.178] Sleep (dwMilliseconds=0x3e8) 
	[0096.236] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0096.369] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0096.370] Sleep (dwMilliseconds=0x3e8) 
	[0097.376] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0097.376] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0097.378] Sleep (dwMilliseconds=0x3e8) 
	[0098.713] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0098.764] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0098.824] Sleep (dwMilliseconds=0x3e8) 
	[0099.829] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0099.829] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0100.196] Sleep (dwMilliseconds=0x3e8) 
	[0101.298] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0101.298] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0101.610] Sleep (dwMilliseconds=0x3e8) 
	[0102.618] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0102.618] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0102.620] Sleep (dwMilliseconds=0x3e8) 
	[0104.974] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 80
	[0104.974] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=0, TotalEncrypted=0") returned 1
	[0104.975] Sleep (dwMilliseconds=0x3e8) 
	[0108.702] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=1, TotalEncrypted=0") returned 80
	[0108.702] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=0, encPS=0, totalFound=1, TotalEncrypted=0") returned 1
	[0108.704] Sleep (dwMilliseconds=0x3e8) 
	[0110.133] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=3360 kbytes, write=2880 kbytes, opened=2, encPS=0, totalFound=6, TotalEncrypted=0") returned 86
	[0110.133] SetConsoleTitleW (lpConsoleTitle="read=3360 kbytes, write=2880 kbytes, opened=2, encPS=0, totalFound=6, TotalEncrypted=0") returned 1
	[0110.166] Sleep (dwMilliseconds=0x3e8) 
	[0111.190] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=9203 kbytes, write=9203 kbytes, opened=2, encPS=18, totalFound=26, TotalEncrypted=18") returned 89
	[0111.190] SetConsoleTitleW (lpConsoleTitle="read=9203 kbytes, write=9203 kbytes, opened=2, encPS=18, totalFound=26, TotalEncrypted=18") returned 1
	[0111.222] Sleep (dwMilliseconds=0x3e8) 
	[0112.227] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=11959 kbytes, write=11959 kbytes, opened=1, encPS=21, totalFound=46, TotalEncrypted=39") returned 91
	[0112.228] SetConsoleTitleW (lpConsoleTitle="read=11959 kbytes, write=11959 kbytes, opened=1, encPS=21, totalFound=46, TotalEncrypted=39") returned 1
	[0112.229] Sleep (dwMilliseconds=0x3e8) 
	[0113.429] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=12052 kbytes, write=12532 kbytes, opened=1, encPS=2, totalFound=49, TotalEncrypted=41") returned 90
	[0113.429] SetConsoleTitleW (lpConsoleTitle="read=12052 kbytes, write=12532 kbytes, opened=1, encPS=2, totalFound=49, TotalEncrypted=41") returned 1
	[0113.431] Sleep (dwMilliseconds=0x3e8) 
	[0114.459] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=6720 kbytes, write=6720 kbytes, opened=1, encPS=20, totalFound=70, TotalEncrypted=61") returned 89
	[0114.459] SetConsoleTitleW (lpConsoleTitle="read=6720 kbytes, write=6720 kbytes, opened=1, encPS=20, totalFound=70, TotalEncrypted=61") returned 1
	[0114.535] Sleep (dwMilliseconds=0x3e8) 
	[0115.556] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=960 kbytes, write=960 kbytes, opened=1, encPS=0, totalFound=72, TotalEncrypted=61") returned 86
	[0115.556] SetConsoleTitleW (lpConsoleTitle="read=960 kbytes, write=960 kbytes, opened=1, encPS=0, totalFound=72, TotalEncrypted=61") returned 1
	[0115.558] Sleep (dwMilliseconds=0x3e8) 
	[0116.571] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=3578 kbytes, write=3578 kbytes, opened=2, encPS=35, totalFound=109, TotalEncrypted=96") returned 90
	[0116.571] SetConsoleTitleW (lpConsoleTitle="read=3578 kbytes, write=3578 kbytes, opened=2, encPS=35, totalFound=109, TotalEncrypted=96") returned 1
	[0116.572] Sleep (dwMilliseconds=0x3e8) 
	[0117.584] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=10959 kbytes, write=10479 kbytes, opened=2, encPS=22, totalFound=135, TotalEncrypted=118") returned 93
	[0117.584] SetConsoleTitleW (lpConsoleTitle="read=10959 kbytes, write=10479 kbytes, opened=2, encPS=22, totalFound=135, TotalEncrypted=118") returned 1
	[0117.586] Sleep (dwMilliseconds=0x3e8) 
	[0118.601] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=9966 kbytes, write=9966 kbytes, opened=1, encPS=21, totalFound=156, TotalEncrypted=139") returned 91
	[0118.601] SetConsoleTitleW (lpConsoleTitle="read=9966 kbytes, write=9966 kbytes, opened=1, encPS=21, totalFound=156, TotalEncrypted=139") returned 1
	[0118.606] Sleep (dwMilliseconds=0x3e8) 
	[0119.622] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=12824 kbytes, write=12824 kbytes, opened=2, encPS=16, totalFound=172, TotalEncrypted=155") returned 93
	[0119.622] SetConsoleTitleW (lpConsoleTitle="read=12824 kbytes, write=12824 kbytes, opened=2, encPS=16, totalFound=172, TotalEncrypted=155") returned 1
	[0119.634] Sleep (dwMilliseconds=0x3e8) 
	[0120.654] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=8295 kbytes, write=8776 kbytes, opened=1, encPS=17, totalFound=195, TotalEncrypted=172") returned 91
	[0120.654] SetConsoleTitleW (lpConsoleTitle="read=8295 kbytes, write=8776 kbytes, opened=1, encPS=17, totalFound=195, TotalEncrypted=172") returned 1
	[0120.664] Sleep (dwMilliseconds=0x3e8) 
	[0121.734] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=10328 kbytes, write=10808 kbytes, opened=2, encPS=15, totalFound=211, TotalEncrypted=187") returned 93
	[0121.734] SetConsoleTitleW (lpConsoleTitle="read=10328 kbytes, write=10808 kbytes, opened=2, encPS=15, totalFound=211, TotalEncrypted=187") returned 1
	[0121.815] Sleep (dwMilliseconds=0x3e8) 
	[0122.826] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=10233 kbytes, write=10233 kbytes, opened=2, encPS=13, totalFound=228, TotalEncrypted=201") returned 93
	[0122.826] SetConsoleTitleW (lpConsoleTitle="read=10233 kbytes, write=10233 kbytes, opened=2, encPS=13, totalFound=228, TotalEncrypted=201") returned 1
	[0122.829] Sleep (dwMilliseconds=0x3e8) 
	[0123.840] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=7380 kbytes, write=7380 kbytes, opened=1, encPS=28, totalFound=255, TotalEncrypted=229") returned 91
	[0123.840] SetConsoleTitleW (lpConsoleTitle="read=7380 kbytes, write=7380 kbytes, opened=1, encPS=28, totalFound=255, TotalEncrypted=229") returned 1
	[0123.842] Sleep (dwMilliseconds=0x3e8) 
	[0124.862] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=11587 kbytes, write=11587 kbytes, opened=1, encPS=5, totalFound=267, TotalEncrypted=234") returned 92
	[0124.862] SetConsoleTitleW (lpConsoleTitle="read=11587 kbytes, write=11587 kbytes, opened=1, encPS=5, totalFound=267, TotalEncrypted=234") returned 1
	[0124.863] Sleep (dwMilliseconds=0x3e8) 
	[0125.883] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=13921 kbytes, write=13921 kbytes, opened=1, encPS=9, totalFound=277, TotalEncrypted=243") returned 92
	[0125.884] SetConsoleTitleW (lpConsoleTitle="read=13921 kbytes, write=13921 kbytes, opened=1, encPS=9, totalFound=277, TotalEncrypted=243") returned 1
	[0125.885] Sleep (dwMilliseconds=0x3e8) 
	[0126.898] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=7687 kbytes, write=7207 kbytes, opened=3, encPS=9, totalFound=307, TotalEncrypted=252") returned 90
	[0126.898] SetConsoleTitleW (lpConsoleTitle="read=7687 kbytes, write=7207 kbytes, opened=3, encPS=9, totalFound=307, TotalEncrypted=252") returned 1
	[0126.900] Sleep (dwMilliseconds=0x3e8) 
	[0127.921] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=18169 kbytes, write=18169 kbytes, opened=3, encPS=1, totalFound=310, TotalEncrypted=253") returned 92
	[0127.921] SetConsoleTitleW (lpConsoleTitle="read=18169 kbytes, write=18169 kbytes, opened=3, encPS=1, totalFound=310, TotalEncrypted=253") returned 1
	[0127.922] Sleep (dwMilliseconds=0x3e8) 
	[0128.926] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=9733 kbytes, write=10213 kbytes, opened=4, encPS=3, totalFound=315, TotalEncrypted=256") returned 91
	[0128.926] SetConsoleTitleW (lpConsoleTitle="read=9733 kbytes, write=10213 kbytes, opened=4, encPS=3, totalFound=315, TotalEncrypted=256") returned 1
	[0128.927] Sleep (dwMilliseconds=0x3e8) 
	[0129.955] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=8133 kbytes, write=8133 kbytes, opened=4, encPS=6, totalFound=324, TotalEncrypted=262") returned 90
	[0129.955] SetConsoleTitleW (lpConsoleTitle="read=8133 kbytes, write=8133 kbytes, opened=4, encPS=6, totalFound=324, TotalEncrypted=262") returned 1
	[0129.957] Sleep (dwMilliseconds=0x3e8) 
	[0130.971] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=7268 kbytes, write=7268 kbytes, opened=3, encPS=1, totalFound=324, TotalEncrypted=263") returned 90
	[0130.971] SetConsoleTitleW (lpConsoleTitle="read=7268 kbytes, write=7268 kbytes, opened=3, encPS=1, totalFound=324, TotalEncrypted=263") returned 1
	[0130.972] Sleep (dwMilliseconds=0x3e8) 
	[0131.983] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=3, encPS=0, totalFound=324, TotalEncrypted=263") returned 84
	[0131.983] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=3, encPS=0, totalFound=324, TotalEncrypted=263") returned 1
	[0131.984] Sleep (dwMilliseconds=0x3e8) 
	[0133.037] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=0 kbytes, write=0 kbytes, opened=3, encPS=0, totalFound=324, TotalEncrypted=263") returned 84
	[0133.037] SetConsoleTitleW (lpConsoleTitle="read=0 kbytes, write=0 kbytes, opened=3, encPS=0, totalFound=324, TotalEncrypted=263") returned 1
	[0133.038] Sleep (dwMilliseconds=0x3e8) 
	[0134.050] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=22080 kbytes, write=21120 kbytes, opened=3, encPS=0, totalFound=324, TotalEncrypted=263") returned 92
	[0134.050] SetConsoleTitleW (lpConsoleTitle="read=22080 kbytes, write=21120 kbytes, opened=3, encPS=0, totalFound=324, TotalEncrypted=263") returned 1
	[0134.054] Sleep (dwMilliseconds=0x3e8) 
	[0135.057] wsprintfW (in: param_1=0x2fbf3ac, param_2="read=%u kbytes, write=%u kbytes, opened=%u, encPS=%u, totalFound=%u, TotalEncrypted=%u" | out: param_1="read=9952 kbytes, write=10432 kbytes, opened=2, encPS=1, totalFound=324, TotalEncrypted=264") returned 91
	[0135.057] SetConsoleTitleW (lpConsoleTitle="read=9952 kbytes, write=10432 kbytes, opened=2, encPS=1, totalFound=324, TotalEncrypted=264") returned 1
	[0135.060] Sleep (dwMilliseconds=0x3e8) 

Thread:
	id = 11
	os_tid = 0x634


Thread:
	id = 12
	os_tid = 0x7cc


Thread:
	id = 13
	os_tid = 0x700


Thread:
	id = 14
	os_tid = 0x7d0


Thread:
	id = 111
	os_tid = 0x808


Thread:
	id = 112
	os_tid = 0x9f0


Thread:
	id = 113
	os_tid = 0x8f8

	[0107.116] GetCurrentThreadId () returned 0x8f8
	[0107.116] GetCurrentThreadId () returned 0x8f8
	[0107.116] GetLastError () returned 0x57
	[0107.116] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x364) returned 0x66b168
	[0107.116] SetLastError (dwErrCode=0x57) 
	[0107.116] GetLastError () returned 0x57
	[0107.117] SetLastError (dwErrCode=0x57) 
	[0107.117] WriteFile (in: hFile=0x7, lpBuffer=0x3f6dd60*, nNumberOfBytesToWrite=0x4f, lpNumberOfBytesWritten=0x3f6dd58, lpOverlapped=0x0 | out: lpBuffer=0x3f6dd60*, lpNumberOfBytesWritten=0x3f6dd58*=0x4f, lpOverlapped=0x0) returned 1
	[0107.118] FindFirstFileW (in: lpFileName="C:\\\\*", lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x61e810
	[0107.118] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f3d0
	[0107.118] lstrcmpW (lpString1="..", lpString2="$Recycle.Bin") returned 1
	[0107.118] lstrcmpW (lpString1=".", lpString2="$Recycle.Bin") returned 1
	[0107.118] StrStrW (lpFirst="$recycle.bin", lpSrch="programdata") returned 0x0
	[0107.119] StrStrW (lpFirst="$recycle.bin", lpSrch="$recycle.bin") returned="$recycle.bin"
	[0107.119] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f3d0 | out: hHeap=0x5f0000) returned 1
	[0107.119] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0107.119] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x64c998
	[0107.119] lstrcmpW (lpString1="..", lpString2="Boot") returned -1
	[0107.119] lstrcmpW (lpString1=".", lpString2="Boot") returned -1
	[0107.119] StrStrW (lpFirst="boot", lpSrch="programdata") returned 0x0
	[0107.119] StrStrW (lpFirst="boot", lpSrch="$recycle.bin") returned 0x0
	[0107.119] StrStrW (lpFirst="boot", lpSrch="program files") returned 0x0
	[0107.119] StrStrW (lpFirst="boot", lpSrch="windows") returned 0x0
	[0107.119] StrStrW (lpFirst="boot", lpSrch="all users") returned 0x0
	[0107.119] StrStrW (lpFirst="boot", lpSrch="winnt") returned 0x0
	[0107.119] StrStrW (lpFirst="boot", lpSrch="appdata") returned 0x0
	[0107.119] StrStrW (lpFirst="boot", lpSrch="application data") returned 0x0
	[0107.119] StrStrW (lpFirst="boot", lpSrch="local settings") returned 0x0
	[0107.119] StrStrW (lpFirst="boot", lpSrch="boot") returned="boot"
	[0107.120] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x64c998 | out: hHeap=0x5f0000) returned 1
	[0107.120] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0107.120] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x64c998
	[0107.120] StrStrW (lpFirst="bootmgr", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0107.120] StrStrW (lpFirst="bootmgr", lpSrch="ntldr") returned 0x0
	[0107.120] StrStrW (lpFirst="bootmgr", lpSrch="pagefile.sys") returned 0x0
	[0107.120] StrStrW (lpFirst="bootmgr", lpSrch="ntdetect.com") returned 0x0
	[0107.120] StrStrW (lpFirst="bootmgr", lpSrch="autoexec.bat") returned 0x0
	[0107.120] StrStrW (lpFirst="bootmgr", lpSrch="desktop.ini") returned 0x0
	[0107.120] StrStrW (lpFirst="bootmgr", lpSrch="autorun.inf") returned 0x0
	[0107.120] StrStrW (lpFirst="bootmgr", lpSrch="ntuser.dat") returned 0x0
	[0107.120] StrStrW (lpFirst="bootmgr", lpSrch="iconcache.db") returned 0x0
	[0107.120] StrStrW (lpFirst="bootmgr", lpSrch="bootsect.bak") returned 0x0
	[0107.120] StrStrW (lpFirst="bootmgr", lpSrch="boot.ini") returned 0x0
	[0107.120] StrStrW (lpFirst="bootmgr", lpSrch="bootfont.bin") returned 0x0
	[0107.121] StrStrW (lpFirst="bootmgr", lpSrch="config.sys") returned 0x0
	[0107.121] StrStrW (lpFirst="bootmgr", lpSrch="io.sys") returned 0x0
	[0107.121] StrStrW (lpFirst="bootmgr", lpSrch="msdos.sys") returned 0x0
	[0107.121] StrStrW (lpFirst="bootmgr", lpSrch="ntuser.dat.log") returned 0x0
	[0107.121] StrStrW (lpFirst="bootmgr", lpSrch="thumbs.db") returned 0x0
	[0107.121] StrStrW (lpFirst="bootmgr", lpSrch="swapfile.sys") returned 0x0
	[0107.121] SetFileAttributesW (lpFileName="C:\\\\bootmgr", dwFileAttributes=0x26) returned 0
	[0107.122] CreateFileW (lpFileName="C:\\\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0xffffffff
	[0107.122] LoadLibraryW (lpLibFileName="Rstrtmgr.dll") returned 0x74fa0000
	[0107.986] RtlWakeAllConditionVariable () returned 0x0
	[0107.987] GetProcAddress (hModule=0x74fa0000, lpProcName="RmStartSession") returned 0x74fa474b
	[0107.987] RtlWakeAllConditionVariable () returned 0x0
	[0107.987] GetProcAddress (hModule=0x74fa0000, lpProcName="RmRegisterResources") returned 0x74fa42f6
	[0107.987] RtlWakeAllConditionVariable () returned 0x0
	[0107.987] GetProcAddress (hModule=0x74fa0000, lpProcName="RmGetList") returned 0x74fa435b
	[0107.987] RtlWakeAllConditionVariable () returned 0x0
	[0107.988] GetProcAddress (hModule=0x74fa0000, lpProcName="RmEndSession") returned 0x74fa4979
	[0107.988] RtlWakeAllConditionVariable () returned 0x0
	[0107.988] GetProcAddress (hModule=0x74fa0000, lpProcName="RmShutdown") returned 0x74fa43ba
	[0107.988] RtlWakeAllConditionVariable () returned 0x0
	[0107.989] RmStartSession () returned 0x0
	[0108.756] RmRegisterResources () returned 0x0
	[0108.759] RmGetList () returned 0x0
	[0108.850] RmEndSession () returned 0x0
	[0108.865] CreateFileW (lpFileName="C:\\\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0xffffffff
	[0108.866] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x64c998 | out: hHeap=0x5f0000) returned 1
	[0108.866] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0108.866] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f558
	[0108.866] StrStrW (lpFirst="bootsect.bak", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0108.866] StrStrW (lpFirst="bootsect.bak", lpSrch="ntldr") returned 0x0
	[0108.866] StrStrW (lpFirst="bootsect.bak", lpSrch="pagefile.sys") returned 0x0
	[0108.866] StrStrW (lpFirst="bootsect.bak", lpSrch="ntdetect.com") returned 0x0
	[0108.866] StrStrW (lpFirst="bootsect.bak", lpSrch="autoexec.bat") returned 0x0
	[0108.866] StrStrW (lpFirst="bootsect.bak", lpSrch="desktop.ini") returned 0x0
	[0108.866] StrStrW (lpFirst="bootsect.bak", lpSrch="autorun.inf") returned 0x0
	[0108.866] StrStrW (lpFirst="bootsect.bak", lpSrch="ntuser.dat") returned 0x0
	[0108.866] StrStrW (lpFirst="bootsect.bak", lpSrch="iconcache.db") returned 0x0
	[0108.866] StrStrW (lpFirst="bootsect.bak", lpSrch="bootsect.bak") returned="bootsect.bak"
	[0108.866] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f558 | out: hHeap=0x5f0000) returned 1
	[0108.866] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
	[0108.866] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x64c998
	[0108.867] lstrcmpW (lpString1="..", lpString2="Config.Msi") returned -1
	[0108.867] lstrcmpW (lpString1=".", lpString2="Config.Msi") returned -1
	[0108.867] StrStrW (lpFirst="config.msi", lpSrch="programdata") returned 0x0
	[0108.867] StrStrW (lpFirst="config.msi", lpSrch="$recycle.bin") returned 0x0
	[0108.867] StrStrW (lpFirst="config.msi", lpSrch="program files") returned 0x0
	[0108.867] StrStrW (lpFirst="config.msi", lpSrch="windows") returned 0x0
	[0108.867] StrStrW (lpFirst="config.msi", lpSrch="all users") returned 0x0
	[0108.867] StrStrW (lpFirst="config.msi", lpSrch="winnt") returned 0x0
	[0108.867] StrStrW (lpFirst="config.msi", lpSrch="appdata") returned 0x0
	[0108.867] StrStrW (lpFirst="config.msi", lpSrch="application data") returned 0x0
	[0108.867] StrStrW (lpFirst="config.msi", lpSrch="local settings") returned 0x0
	[0108.867] StrStrW (lpFirst="config.msi", lpSrch="boot") returned 0x0
	[0108.867] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x673588
	[0108.867] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f558
	[0108.867] FindFirstFileW (in: lpFileName="C:\\\\Config.Msi\\*", lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b00001b, cFileName=".", cAlternateFileName="")) returned 0x61e950
	[0108.868] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f558 | out: hHeap=0x5f0000) returned 1
	[0108.868] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x6733f8
	[0108.868] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f558
	[0108.868] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6733f8 | out: hHeap=0x5f0000) returned 1
	[0108.868] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0108.868] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0108.868] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f558 | out: hHeap=0x5f0000) returned 1
	[0108.868] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b00001b, cFileName="..", cAlternateFileName="")) returned 1
	[0108.868] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x6733f8
	[0108.868] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f558
	[0108.868] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6733f8 | out: hHeap=0x5f0000) returned 1
	[0108.868] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0108.868] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f558 | out: hHeap=0x5f0000) returned 1
	[0108.868] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b00001b, cFileName="..", cAlternateFileName="")) returned 0
	[0108.868] FindClose (in: hFindFile=0x61e950 | out: hFindFile=0x61e950) returned 1
	[0108.868] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f558
	[0108.868] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x6733f8
	[0108.868] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644cc0
	[0108.868] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6733f8 | out: hHeap=0x5f0000) returned 1
	[0108.868] CreateFileW (lpFileName="C:\\\\Config.Msi\\read_me_lkdtt.txt" (normalized: "c:\\config.msi\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x308
	[0108.869] WriteFile (in: hFile=0x308, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6f1d4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6f1d4*=0x512, lpOverlapped=0x0) returned 1
	[0108.870] CloseHandle (hObject=0x308) returned 1
	[0108.897] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644cc0 | out: hHeap=0x5f0000) returned 1
	[0108.897] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f558 | out: hHeap=0x5f0000) returned 1
	[0108.897] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x673588 | out: hHeap=0x5f0000) returned 1
	[0108.897] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x64c998 | out: hHeap=0x5f0000) returned 1
	[0109.080] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0109.080] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665608
	[0109.080] lstrcmpW (lpString1="..", lpString2="Documents and Settings") returned -1
	[0109.080] lstrcmpW (lpString1=".", lpString2="Documents and Settings") returned -1
	[0109.081] StrStrW (lpFirst="documents and settings", lpSrch="programdata") returned 0x0
	[0109.081] StrStrW (lpFirst="documents and settings", lpSrch="$recycle.bin") returned 0x0
	[0109.081] StrStrW (lpFirst="documents and settings", lpSrch="program files") returned 0x0
	[0109.081] StrStrW (lpFirst="documents and settings", lpSrch="windows") returned 0x0
	[0109.081] StrStrW (lpFirst="documents and settings", lpSrch="all users") returned 0x0
	[0109.081] StrStrW (lpFirst="documents and settings", lpSrch="winnt") returned 0x0
	[0109.081] StrStrW (lpFirst="documents and settings", lpSrch="appdata") returned 0x0
	[0109.081] StrStrW (lpFirst="documents and settings", lpSrch="application data") returned 0x0
	[0109.081] StrStrW (lpFirst="documents and settings", lpSrch="local settings") returned 0x0
	[0109.082] StrStrW (lpFirst="documents and settings", lpSrch="boot") returned 0x0
	[0109.082] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665650
	[0109.082] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665698
	[0109.082] FindFirstFileW (in: lpFileName="C:\\\\Documents and Settings\\*", lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b00001b, cFileName="..", cAlternateFileName="噐f嘈f6")) returned 0xffffffff
	[0109.082] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665698 | out: hHeap=0x5f0000) returned 1
	[0109.082] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665650 | out: hHeap=0x5f0000) returned 1
	[0109.082] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665608 | out: hHeap=0x5f0000) returned 1
	[0109.083] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0109.083] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0109.083] StrStrW (lpFirst="hiberfil.sys", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0109.083] StrStrW (lpFirst="hiberfil.sys", lpSrch="ntldr") returned 0x0
	[0109.083] StrStrW (lpFirst="hiberfil.sys", lpSrch="pagefile.sys") returned 0x0
	[0109.083] StrStrW (lpFirst="hiberfil.sys", lpSrch="ntdetect.com") returned 0x0
	[0109.083] StrStrW (lpFirst="hiberfil.sys", lpSrch="autoexec.bat") returned 0x0
	[0109.084] StrStrW (lpFirst="hiberfil.sys", lpSrch="desktop.ini") returned 0x0
	[0109.084] StrStrW (lpFirst="hiberfil.sys", lpSrch="autorun.inf") returned 0x0
	[0109.084] StrStrW (lpFirst="hiberfil.sys", lpSrch="ntuser.dat") returned 0x0
	[0109.084] StrStrW (lpFirst="hiberfil.sys", lpSrch="iconcache.db") returned 0x0
	[0109.084] StrStrW (lpFirst="hiberfil.sys", lpSrch="bootsect.bak") returned 0x0
	[0109.084] StrStrW (lpFirst="hiberfil.sys", lpSrch="boot.ini") returned 0x0
	[0109.084] StrStrW (lpFirst="hiberfil.sys", lpSrch="bootfont.bin") returned 0x0
	[0109.084] StrStrW (lpFirst="hiberfil.sys", lpSrch="config.sys") returned 0x0
	[0109.084] StrStrW (lpFirst="hiberfil.sys", lpSrch="io.sys") returned 0x0
	[0109.084] StrStrW (lpFirst="hiberfil.sys", lpSrch="msdos.sys") returned 0x0
	[0109.084] StrStrW (lpFirst="hiberfil.sys", lpSrch="ntuser.dat.log") returned 0x0
	[0109.084] StrStrW (lpFirst="hiberfil.sys", lpSrch="thumbs.db") returned 0x0
	[0109.085] StrStrW (lpFirst="hiberfil.sys", lpSrch="swapfile.sys") returned 0x0
	[0109.085] CreateFileW (lpFileName="C:\\\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0xffffffff
	[0109.537] RmStartSession () returned 0x0
	[0109.690] RmRegisterResources () returned 0x0
	[0109.693] RmGetList () returned 0x20
	[0109.706] RmEndSession () returned 0x0
	[0109.721] CreateFileW (lpFileName="C:\\\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0xffffffff
	[0109.721] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0109.721] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
	[0109.721] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x35270d8
	[0109.722] lstrcmpW (lpString1="..", lpString2="MSOCache") returned -1
	[0109.722] lstrcmpW (lpString1=".", lpString2="MSOCache") returned -1
	[0109.722] StrStrW (lpFirst="msocache", lpSrch="programdata") returned 0x0
	[0109.722] StrStrW (lpFirst="msocache", lpSrch="$recycle.bin") returned 0x0
	[0109.722] StrStrW (lpFirst="msocache", lpSrch="program files") returned 0x0
	[0109.722] StrStrW (lpFirst="msocache", lpSrch="windows") returned 0x0
	[0109.722] StrStrW (lpFirst="msocache", lpSrch="all users") returned 0x0
	[0109.722] StrStrW (lpFirst="msocache", lpSrch="winnt") returned 0x0
	[0109.722] StrStrW (lpFirst="msocache", lpSrch="appdata") returned 0x0
	[0109.722] StrStrW (lpFirst="msocache", lpSrch="application data") returned 0x0
	[0109.722] StrStrW (lpFirst="msocache", lpSrch="local settings") returned 0x0
	[0109.722] StrStrW (lpFirst="msocache", lpSrch="boot") returned 0x0
	[0109.722] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526f98
	[0109.722] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0109.722] FindFirstFileW (in: lpFileName="C:\\\\MSOCache\\*", lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName=".", cAlternateFileName="")) returned 0x61e890
	[0109.723] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0109.723] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0109.723] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.723] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.723] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0109.723] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName="..", cAlternateFileName="")) returned 1
	[0109.723] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0109.723] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.723] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0109.723] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0109.723] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0109.723] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0109.723] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0109.723] lstrcmpW (lpString1="..", lpString2="All Users") returned -1
	[0109.723] lstrcmpW (lpString1=".", lpString2="All Users") returned -1
	[0109.724] StrStrW (lpFirst="all users", lpSrch="programdata") returned 0x0
	[0109.724] StrStrW (lpFirst="all users", lpSrch="$recycle.bin") returned 0x0
	[0109.724] StrStrW (lpFirst="all users", lpSrch="program files") returned 0x0
	[0109.724] StrStrW (lpFirst="all users", lpSrch="windows") returned 0x0
	[0109.724] StrStrW (lpFirst="all users", lpSrch="all users") returned="all users"
	[0109.724] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0109.724] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName="all users", cAlternateFileName="ALLUSE~1")) returned 0
	[0109.724] FindClose (in: hFindFile=0x61e890 | out: hFindFile=0x61e890) returned 1
	[0109.724] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0109.724] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0109.724] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665728
	[0109.724] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0109.724] CreateFileW (lpFileName="C:\\\\MSOCache\\read_me_lkdtt.txt" (normalized: "c:\\msocache\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c
	[0109.725] WriteFile (in: hFile=0x39c, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6f1d4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6f1d4*=0x512, lpOverlapped=0x0) returned 1
	[0109.726] CloseHandle (hObject=0x39c) returned 1
	[0109.726] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665728 | out: hHeap=0x5f0000) returned 1
	[0109.726] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0109.726] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526f98 | out: hHeap=0x5f0000) returned 1
	[0109.726] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35270d8 | out: hHeap=0x5f0000) returned 1
	[0109.726] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaece4da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0109.726] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0109.726] StrStrW (lpFirst="pagefile.sys", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0109.727] StrStrW (lpFirst="pagefile.sys", lpSrch="ntldr") returned 0x0
	[0109.727] StrStrW (lpFirst="pagefile.sys", lpSrch="pagefile.sys") returned="pagefile.sys"
	[0109.727] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0109.727] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0109.727] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x35270d8
	[0109.727] lstrcmpW (lpString1="..", lpString2="PerfLogs") returned -1
	[0109.727] lstrcmpW (lpString1=".", lpString2="PerfLogs") returned -1
	[0109.727] StrStrW (lpFirst="perflogs", lpSrch="programdata") returned 0x0
	[0109.727] StrStrW (lpFirst="perflogs", lpSrch="$recycle.bin") returned 0x0
	[0109.727] StrStrW (lpFirst="perflogs", lpSrch="program files") returned 0x0
	[0109.727] StrStrW (lpFirst="perflogs", lpSrch="windows") returned 0x0
	[0109.727] StrStrW (lpFirst="perflogs", lpSrch="all users") returned 0x0
	[0109.727] StrStrW (lpFirst="perflogs", lpSrch="winnt") returned 0x0
	[0109.727] StrStrW (lpFirst="perflogs", lpSrch="appdata") returned 0x0
	[0109.727] StrStrW (lpFirst="perflogs", lpSrch="application data") returned 0x0
	[0109.728] StrStrW (lpFirst="perflogs", lpSrch="local settings") returned 0x0
	[0109.728] StrStrW (lpFirst="perflogs", lpSrch="boot") returned 0x0
	[0109.728] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526f98
	[0109.728] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0109.728] FindFirstFileW (in: lpFileName="C:\\\\PerfLogs\\*", lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName=".", cAlternateFileName="")) returned 0x61e890
	[0109.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0109.728] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0109.728] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.728] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0109.728] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName="..", cAlternateFileName="")) returned 1
	[0109.728] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0109.729] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.729] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0109.729] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName="Admin", cAlternateFileName="")) returned 1
	[0109.729] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0109.729] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0109.729] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0109.729] lstrcmpW (lpString1="..", lpString2="Admin") returned -1
	[0109.729] lstrcmpW (lpString1=".", lpString2="Admin") returned -1
	[0109.729] StrStrW (lpFirst="admin", lpSrch="programdata") returned 0x0
	[0109.729] StrStrW (lpFirst="admin", lpSrch="$recycle.bin") returned 0x0
	[0109.729] StrStrW (lpFirst="admin", lpSrch="program files") returned 0x0
	[0109.729] StrStrW (lpFirst="admin", lpSrch="windows") returned 0x0
	[0109.729] StrStrW (lpFirst="admin", lpSrch="all users") returned 0x0
	[0109.729] StrStrW (lpFirst="admin", lpSrch="winnt") returned 0x0
	[0109.729] StrStrW (lpFirst="admin", lpSrch="appdata") returned 0x0
	[0109.729] StrStrW (lpFirst="admin", lpSrch="application data") returned 0x0
	[0109.730] StrStrW (lpFirst="admin", lpSrch="local settings") returned 0x0
	[0109.730] StrStrW (lpFirst="admin", lpSrch="boot") returned 0x0
	[0109.730] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x4080068
	[0109.730] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x40800a0
	[0109.730] FindFirstFileW (in: lpFileName="C:\\\\PerfLogs\\Admin\\*", lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e910
	[0109.730] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40800a0 | out: hHeap=0x5f0000) returned 1
	[0109.730] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x40800a0
	[0109.730] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.730] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.730] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40800a0 | out: hHeap=0x5f0000) returned 1
	[0109.730] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0109.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x40800a0
	[0109.731] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.731] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40800a0 | out: hHeap=0x5f0000) returned 1
	[0109.731] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0109.731] FindClose (in: hFindFile=0x61e910 | out: hFindFile=0x61e910) returned 1
	[0109.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x40800a0
	[0109.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x40800d8
	[0109.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0109.731] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40800d8 | out: hHeap=0x5f0000) returned 1
	[0109.731] CreateFileW (lpFileName="C:\\\\PerfLogs\\Admin\\read_me_lkdtt.txt" (normalized: "c:\\perflogs\\admin\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3a4
	[0109.745] WriteFile (in: hFile=0x3a4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eea4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eea4*=0x512, lpOverlapped=0x0) returned 1
	[0109.746] CloseHandle (hObject=0x3a4) returned 1
	[0109.746] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0109.746] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40800a0 | out: hHeap=0x5f0000) returned 1
	[0109.746] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080068 | out: hHeap=0x5f0000) returned 1
	[0109.746] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0109.747] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName="admin", cAlternateFileName="")) returned 0
	[0109.747] FindClose (in: hFindFile=0x61e890 | out: hFindFile=0x61e890) returned 1
	[0109.747] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0109.747] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526ae8
	[0109.747] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0109.747] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526ae8 | out: hHeap=0x5f0000) returned 1
	[0109.747] CreateFileW (lpFileName="C:\\\\PerfLogs\\read_me_lkdtt.txt" (normalized: "c:\\perflogs\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c
	[0109.747] WriteFile (in: hFile=0x39c, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6f1d4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6f1d4*=0x512, lpOverlapped=0x0) returned 1
	[0109.748] CloseHandle (hObject=0x39c) returned 1
	[0109.749] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0109.749] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0109.749] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526f98 | out: hHeap=0x5f0000) returned 1
	[0109.749] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35270d8 | out: hHeap=0x5f0000) returned 1
	[0109.749] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe9501620, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe9501620, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0109.749] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0109.749] lstrcmpW (lpString1="..", lpString2="Program Files") returned -1
	[0109.749] lstrcmpW (lpString1=".", lpString2="Program Files") returned -1
	[0109.749] StrStrW (lpFirst="program files", lpSrch="programdata") returned 0x0
	[0109.749] StrStrW (lpFirst="program files", lpSrch="$recycle.bin") returned 0x0
	[0109.749] StrStrW (lpFirst="program files", lpSrch="program files") returned="program files"
	[0109.749] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0109.749] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
	[0109.749] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0109.749] lstrcmpW (lpString1="..", lpString2="Program Files (x86)") returned -1
	[0109.749] lstrcmpW (lpString1=".", lpString2="Program Files (x86)") returned -1
	[0109.749] StrStrW (lpFirst="program files (x86)", lpSrch="programdata") returned 0x0
	[0109.749] StrStrW (lpFirst="program files (x86)", lpSrch="$recycle.bin") returned 0x0
	[0109.749] StrStrW (lpFirst="program files (x86)", lpSrch="program files") returned="program files (x86)"
	[0109.750] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0109.750] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
	[0109.750] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x35270d8
	[0109.750] lstrcmpW (lpString1="..", lpString2="ProgramData") returned -1
	[0109.750] lstrcmpW (lpString1=".", lpString2="ProgramData") returned -1
	[0109.750] StrStrW (lpFirst="programdata", lpSrch="programdata") returned="programdata"
	[0109.750] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35270d8 | out: hHeap=0x5f0000) returned 1
	[0109.750] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0109.750] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x35270d8
	[0109.750] lstrcmpW (lpString1="..", lpString2="Recovery") returned -1
	[0109.750] lstrcmpW (lpString1=".", lpString2="Recovery") returned -1
	[0109.750] StrStrW (lpFirst="recovery", lpSrch="programdata") returned 0x0
	[0109.750] StrStrW (lpFirst="recovery", lpSrch="$recycle.bin") returned 0x0
	[0109.750] StrStrW (lpFirst="recovery", lpSrch="program files") returned 0x0
	[0109.750] StrStrW (lpFirst="recovery", lpSrch="windows") returned 0x0
	[0109.750] StrStrW (lpFirst="recovery", lpSrch="all users") returned 0x0
	[0109.750] StrStrW (lpFirst="recovery", lpSrch="winnt") returned 0x0
	[0109.750] StrStrW (lpFirst="recovery", lpSrch="appdata") returned 0x0
	[0109.750] StrStrW (lpFirst="recovery", lpSrch="application data") returned 0x0
	[0109.750] StrStrW (lpFirst="recovery", lpSrch="local settings") returned 0x0
	[0109.751] StrStrW (lpFirst="recovery", lpSrch="boot") returned 0x0
	[0109.751] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526f98
	[0109.751] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526ae8
	[0109.751] FindFirstFileW (in: lpFileName="C:\\\\Recovery\\*", lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName=".", cAlternateFileName="")) returned 0x61e890
	[0109.752] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526ae8 | out: hHeap=0x5f0000) returned 1
	[0109.752] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526ae8
	[0109.752] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.752] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.752] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526ae8 | out: hHeap=0x5f0000) returned 1
	[0109.752] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName="..", cAlternateFileName="")) returned 1
	[0109.752] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526ae8
	[0109.752] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.752] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526ae8 | out: hHeap=0x5f0000) returned 1
	[0109.752] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1
	[0109.752] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526ae8
	[0109.752] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0109.752] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526ae8 | out: hHeap=0x5f0000) returned 1
	[0109.752] lstrcmpW (lpString1="..", lpString2="e9e23962-4a25-11e7-88e8-91fb2ec43f0b") returned -1
	[0109.752] lstrcmpW (lpString1=".", lpString2="e9e23962-4a25-11e7-88e8-91fb2ec43f0b") returned -1
	[0109.752] StrStrW (lpFirst="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpSrch="programdata") returned 0x0
	[0109.752] StrStrW (lpFirst="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpSrch="$recycle.bin") returned 0x0
	[0109.752] StrStrW (lpFirst="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpSrch="program files") returned 0x0
	[0109.752] StrStrW (lpFirst="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpSrch="windows") returned 0x0
	[0109.752] StrStrW (lpFirst="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpSrch="all users") returned 0x0
	[0109.753] StrStrW (lpFirst="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpSrch="winnt") returned 0x0
	[0109.753] StrStrW (lpFirst="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpSrch="appdata") returned 0x0
	[0109.753] StrStrW (lpFirst="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpSrch="application data") returned 0x0
	[0109.753] StrStrW (lpFirst="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpSrch="local settings") returned 0x0
	[0109.753] StrStrW (lpFirst="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", lpSrch="boot") returned 0x0
	[0109.753] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0109.753] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0109.753] FindFirstFileW (in: lpFileName="C:\\\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e910
	[0109.753] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0109.753] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0109.753] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0109.753] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0109.753] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0109.754] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0109.754] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0109.754] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0109.754] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0109.754] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1
	[0109.754] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0109.754] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x3510048
	[0109.754] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0109.754] StrStrW (lpFirst="boot.sdi", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0109.754] StrStrW (lpFirst="boot.sdi", lpSrch="ntldr") returned 0x0
	[0109.754] StrStrW (lpFirst="boot.sdi", lpSrch="pagefile.sys") returned 0x0
	[0109.754] StrStrW (lpFirst="boot.sdi", lpSrch="ntdetect.com") returned 0x0
	[0109.754] StrStrW (lpFirst="boot.sdi", lpSrch="autoexec.bat") returned 0x0
	[0109.754] StrStrW (lpFirst="boot.sdi", lpSrch="desktop.ini") returned 0x0
	[0109.755] StrStrW (lpFirst="boot.sdi", lpSrch="autorun.inf") returned 0x0
	[0109.755] StrStrW (lpFirst="boot.sdi", lpSrch="ntuser.dat") returned 0x0
	[0109.755] StrStrW (lpFirst="boot.sdi", lpSrch="iconcache.db") returned 0x0
	[0109.755] StrStrW (lpFirst="boot.sdi", lpSrch="bootsect.bak") returned 0x0
	[0109.755] StrStrW (lpFirst="boot.sdi", lpSrch="boot.ini") returned 0x0
	[0109.755] StrStrW (lpFirst="boot.sdi", lpSrch="bootfont.bin") returned 0x0
	[0109.755] StrStrW (lpFirst="boot.sdi", lpSrch="config.sys") returned 0x0
	[0109.755] StrStrW (lpFirst="boot.sdi", lpSrch="io.sys") returned 0x0
	[0109.755] StrStrW (lpFirst="boot.sdi", lpSrch="msdos.sys") returned 0x0
	[0109.755] StrStrW (lpFirst="boot.sdi", lpSrch="ntuser.dat.log") returned 0x0
	[0109.755] StrStrW (lpFirst="boot.sdi", lpSrch="thumbs.db") returned 0x0
	[0109.755] StrStrW (lpFirst="boot.sdi", lpSrch="swapfile.sys") returned 0x0
	[0109.755] CreateFileW (lpFileName="C:\\\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3a8
	[0109.756] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x3f6ede8 | out: lpFileSize=0x3f6ede8*=3170304) returned 1
	[0109.756] CreateIoCompletionPort (FileHandle=0x3a8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0109.756] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0109.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x632f78
	[0109.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x4081a80
	[0109.768] CryptAcquireContextW (in: phProv=0x3f6eabc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6eabc*=0x633000) returned 1
	[0109.934] CryptGenRandom (in: hProv=0x633000, dwLen=0x80, pbBuffer=0x3f6ead0 | out: pbBuffer=0x3f6ead0) returned 1
	[0109.934] CryptReleaseContext (hProv=0x633000, dwFlags=0x0) returned 1
	[0109.935] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0109.937] GetLastError () returned 0x3e5
	[0109.937] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510048 | out: hHeap=0x5f0000) returned 1
	[0109.937] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1
	[0109.937] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0109.937] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0109.937] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0109.937] StrStrW (lpFirst="winre.wim", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0109.937] StrStrW (lpFirst="winre.wim", lpSrch="ntldr") returned 0x0
	[0109.937] StrStrW (lpFirst="winre.wim", lpSrch="pagefile.sys") returned 0x0
	[0109.938] StrStrW (lpFirst="winre.wim", lpSrch="ntdetect.com") returned 0x0
	[0109.938] StrStrW (lpFirst="winre.wim", lpSrch="autoexec.bat") returned 0x0
	[0109.938] StrStrW (lpFirst="winre.wim", lpSrch="desktop.ini") returned 0x0
	[0109.938] StrStrW (lpFirst="winre.wim", lpSrch="autorun.inf") returned 0x0
	[0109.938] StrStrW (lpFirst="winre.wim", lpSrch="ntuser.dat") returned 0x0
	[0109.938] StrStrW (lpFirst="winre.wim", lpSrch="iconcache.db") returned 0x0
	[0109.938] StrStrW (lpFirst="winre.wim", lpSrch="bootsect.bak") returned 0x0
	[0109.938] StrStrW (lpFirst="winre.wim", lpSrch="boot.ini") returned 0x0
	[0109.938] StrStrW (lpFirst="winre.wim", lpSrch="bootfont.bin") returned 0x0
	[0109.938] StrStrW (lpFirst="winre.wim", lpSrch="config.sys") returned 0x0
	[0109.938] StrStrW (lpFirst="winre.wim", lpSrch="io.sys") returned 0x0
	[0109.939] StrStrW (lpFirst="winre.wim", lpSrch="msdos.sys") returned 0x0
	[0109.939] StrStrW (lpFirst="winre.wim", lpSrch="ntuser.dat.log") returned 0x0
	[0109.939] StrStrW (lpFirst="winre.wim", lpSrch="thumbs.db") returned 0x0
	[0109.939] StrStrW (lpFirst="winre.wim", lpSrch="swapfile.sys") returned 0x0
	[0109.939] CreateFileW (lpFileName="C:\\\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ac
	[0109.942] GetFileSizeEx (in: hFile=0x3ac, lpFileSize=0x3f6ede8 | out: lpFileSize=0x3f6ede8*=169213970) returned 1
	[0109.942] CreateIoCompletionPort (FileHandle=0x3ac, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0109.942] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x48b0020
	[0109.957] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633000
	[0109.957] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x35195b0
	[0109.957] CryptAcquireContextW (in: phProv=0x3f6eabc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6eabc*=0x633088) returned 1
	[0109.959] CryptGenRandom (in: hProv=0x633088, dwLen=0x80, pbBuffer=0x3f6ead0 | out: pbBuffer=0x3f6ead0) returned 1
	[0109.959] CryptReleaseContext (hProv=0x633088, dwFlags=0x0) returned 1
	[0109.959] ReadFile (in: hFile=0x3ac, lpBuffer=0x48b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020 | out: lpBuffer=0x48b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x48b0020) returned 1
	[0109.972] GetLastError () returned 0x3e5
	[0109.972] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0109.972] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="winre.wim", cAlternateFileName="")) returned 0
	[0109.972] FindClose (in: hFindFile=0x61e910 | out: hFindFile=0x61e910) returned 1
	[0109.972] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0109.972] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0109.972] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0109.972] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0109.972] CreateFileW (lpFileName="C:\\\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\read_me_lkdtt.txt" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3a4
	[0109.973] WriteFile (in: hFile=0x3a4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eea4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eea4*=0x512, lpOverlapped=0x0) returned 1
	[0109.974] CloseHandle (hObject=0x3a4) returned 1
	[0109.974] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0109.974] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0109.974] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0109.974] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0109.975] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 0
	[0109.975] FindClose (in: hFindFile=0x61e890 | out: hFindFile=0x61e890) returned 1
	[0109.975] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0109.975] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x4080090
	[0109.975] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0109.975] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4080090 | out: hHeap=0x5f0000) returned 1
	[0109.975] CreateFileW (lpFileName="C:\\\\Recovery\\read_me_lkdtt.txt" (normalized: "c:\\recovery\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c
	[0110.264] WriteFile (in: hFile=0x39c, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6f1d4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6f1d4*=0x512, lpOverlapped=0x0) returned 1
	[0110.265] CloseHandle (hObject=0x39c) returned 1
	[0110.265] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0110.265] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0110.265] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526f98 | out: hHeap=0x5f0000) returned 1
	[0110.265] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35270d8 | out: hHeap=0x5f0000) returned 1
	[0110.265] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1
	[0110.266] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0110.266] lstrcmpW (lpString1="..", lpString2="System Volume Information") returned -1
	[0110.266] lstrcmpW (lpString1=".", lpString2="System Volume Information") returned -1
	[0110.266] StrStrW (lpFirst="system volume information", lpSrch="programdata") returned 0x0
	[0110.266] StrStrW (lpFirst="system volume information", lpSrch="$recycle.bin") returned 0x0
	[0110.266] StrStrW (lpFirst="system volume information", lpSrch="program files") returned 0x0
	[0110.266] StrStrW (lpFirst="system volume information", lpSrch="windows") returned 0x0
	[0110.266] StrStrW (lpFirst="system volume information", lpSrch="all users") returned 0x0
	[0110.266] StrStrW (lpFirst="system volume information", lpSrch="winnt") returned 0x0
	[0110.266] StrStrW (lpFirst="system volume information", lpSrch="appdata") returned 0x0
	[0110.266] StrStrW (lpFirst="system volume information", lpSrch="application data") returned 0x0
	[0110.266] StrStrW (lpFirst="system volume information", lpSrch="local settings") returned 0x0
	[0110.267] StrStrW (lpFirst="system volume information", lpSrch="boot") returned 0x0
	[0110.267] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0110.267] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665800
	[0110.267] FindFirstFileW (in: lpFileName="C:\\\\System Volume Information\\*", lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="垸f坰f<")) returned 0xffffffff
	[0110.267] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665800 | out: hHeap=0x5f0000) returned 1
	[0110.267] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0110.267] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0110.267] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0110.267] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x35270d8
	[0110.267] lstrcmpW (lpString1="..", lpString2="Users") returned -1
	[0110.267] lstrcmpW (lpString1=".", lpString2="Users") returned -1
	[0110.267] StrStrW (lpFirst="users", lpSrch="programdata") returned 0x0
	[0110.267] StrStrW (lpFirst="users", lpSrch="$recycle.bin") returned 0x0
	[0110.267] StrStrW (lpFirst="users", lpSrch="program files") returned 0x0
	[0110.268] StrStrW (lpFirst="users", lpSrch="windows") returned 0x0
	[0110.268] StrStrW (lpFirst="users", lpSrch="all users") returned 0x0
	[0110.268] StrStrW (lpFirst="users", lpSrch="winnt") returned 0x0
	[0110.268] StrStrW (lpFirst="users", lpSrch="appdata") returned 0x0
	[0110.268] StrStrW (lpFirst="users", lpSrch="application data") returned 0x0
	[0110.268] StrStrW (lpFirst="users", lpSrch="local settings") returned 0x0
	[0110.268] StrStrW (lpFirst="users", lpSrch="boot") returned 0x0
	[0110.268] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526f98
	[0110.268] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x35271a0
	[0110.268] FindFirstFileW (in: lpFileName="C:\\\\Users\\*", lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName=".", cAlternateFileName="")) returned 0x61e890
	[0110.269] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35271a0 | out: hHeap=0x5f0000) returned 1
	[0110.269] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x35271a0
	[0110.269] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0110.269] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0110.269] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35271a0 | out: hHeap=0x5f0000) returned 1
	[0110.269] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName="..", cAlternateFileName="")) returned 1
	[0110.269] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x35271a0
	[0110.269] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0110.269] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35271a0 | out: hHeap=0x5f0000) returned 1
	[0110.269] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x16000016, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1
	[0110.269] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x35271a0
	[0110.269] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0110.269] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35271a0 | out: hHeap=0x5f0000) returned 1
	[0110.269] lstrcmpW (lpString1="..", lpString2="5p5NrGJn0jS HALPmcxz") returned -1
	[0110.270] lstrcmpW (lpString1=".", lpString2="5p5NrGJn0jS HALPmcxz") returned -1
	[0110.270] StrStrW (lpFirst="5p5nrgjn0js halpmcxz", lpSrch="programdata") returned 0x0
	[0110.270] StrStrW (lpFirst="5p5nrgjn0js halpmcxz", lpSrch="$recycle.bin") returned 0x0
	[0110.270] StrStrW (lpFirst="5p5nrgjn0js halpmcxz", lpSrch="program files") returned 0x0
	[0110.270] StrStrW (lpFirst="5p5nrgjn0js halpmcxz", lpSrch="windows") returned 0x0
	[0110.270] StrStrW (lpFirst="5p5nrgjn0js halpmcxz", lpSrch="all users") returned 0x0
	[0110.270] StrStrW (lpFirst="5p5nrgjn0js halpmcxz", lpSrch="winnt") returned 0x0
	[0110.270] StrStrW (lpFirst="5p5nrgjn0js halpmcxz", lpSrch="appdata") returned 0x0
	[0110.270] StrStrW (lpFirst="5p5nrgjn0js halpmcxz", lpSrch="application data") returned 0x0
	[0110.270] StrStrW (lpFirst="5p5nrgjn0js halpmcxz", lpSrch="local settings") returned 0x0
	[0110.270] StrStrW (lpFirst="5p5nrgjn0js halpmcxz", lpSrch="boot") returned 0x0
	[0110.270] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0110.271] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0110.271] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e910
	[0110.271] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0110.271] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665800
	[0110.271] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0110.271] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665800 | out: hHeap=0x5f0000) returned 1
	[0110.271] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0110.271] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0110.271] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0110.271] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0110.271] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665800
	[0110.271] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0110.271] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665800 | out: hHeap=0x5f0000) returned 1
	[0110.271] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0110.271] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0110.272] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0110.272] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665800
	[0110.272] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0110.272] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665800 | out: hHeap=0x5f0000) returned 1
	[0110.272] lstrcmpW (lpString1="..", lpString2="AppData") returned -1
	[0110.272] lstrcmpW (lpString1=".", lpString2="AppData") returned -1
	[0110.272] StrStrW (lpFirst="appdata", lpSrch="programdata") returned 0x0
	[0110.272] StrStrW (lpFirst="appdata", lpSrch="$recycle.bin") returned 0x0
	[0110.272] StrStrW (lpFirst="appdata", lpSrch="program files") returned 0x0
	[0110.272] StrStrW (lpFirst="appdata", lpSrch="windows") returned 0x0
	[0110.272] StrStrW (lpFirst="appdata", lpSrch="all users") returned 0x0
	[0110.272] StrStrW (lpFirst="appdata", lpSrch="winnt") returned 0x0
	[0110.272] StrStrW (lpFirst="appdata", lpSrch="appdata") returned="appdata"
	[0110.272] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0110.272] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0110.273] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665800
	[0110.273] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0110.273] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665800 | out: hHeap=0x5f0000) returned 1
	[0110.273] lstrcmpW (lpString1="..", lpString2="Application Data") returned -1
	[0110.273] lstrcmpW (lpString1=".", lpString2="Application Data") returned -1
	[0110.273] StrStrW (lpFirst="application data", lpSrch="programdata") returned 0x0
	[0110.273] StrStrW (lpFirst="application data", lpSrch="$recycle.bin") returned 0x0
	[0110.273] StrStrW (lpFirst="application data", lpSrch="program files") returned 0x0
	[0110.273] StrStrW (lpFirst="application data", lpSrch="windows") returned 0x0
	[0110.273] StrStrW (lpFirst="application data", lpSrch="all users") returned 0x0
	[0110.273] StrStrW (lpFirst="application data", lpSrch="winnt") returned 0x0
	[0110.273] StrStrW (lpFirst="application data", lpSrch="appdata") returned 0x0
	[0110.273] StrStrW (lpFirst="application data", lpSrch="application data") returned="application data"
	[0110.273] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0110.273] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0110.274] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665800
	[0110.274] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0110.274] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665800 | out: hHeap=0x5f0000) returned 1
	[0110.274] lstrcmpW (lpString1="..", lpString2="Contacts") returned -1
	[0110.274] lstrcmpW (lpString1=".", lpString2="Contacts") returned -1
	[0110.274] StrStrW (lpFirst="contacts", lpSrch="programdata") returned 0x0
	[0110.274] StrStrW (lpFirst="contacts", lpSrch="$recycle.bin") returned 0x0
	[0110.274] StrStrW (lpFirst="contacts", lpSrch="program files") returned 0x0
	[0110.274] StrStrW (lpFirst="contacts", lpSrch="windows") returned 0x0
	[0110.274] StrStrW (lpFirst="contacts", lpSrch="all users") returned 0x0
	[0110.274] StrStrW (lpFirst="contacts", lpSrch="winnt") returned 0x0
	[0110.274] StrStrW (lpFirst="contacts", lpSrch="appdata") returned 0x0
	[0110.274] StrStrW (lpFirst="contacts", lpSrch="application data") returned 0x0
	[0110.275] StrStrW (lpFirst="contacts", lpSrch="local settings") returned 0x0
	[0110.275] StrStrW (lpFirst="contacts", lpSrch="boot") returned 0x0
	[0110.275] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0110.275] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.275] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0110.275] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.275] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.275] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0110.275] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0110.275] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.275] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0110.275] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.275] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0110.276] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.276] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1
	[0110.276] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.276] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0110.276] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.276] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.276] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="ntldr") returned 0x0
	[0110.276] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="pagefile.sys") returned 0x0
	[0110.276] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="ntdetect.com") returned 0x0
	[0110.276] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="autoexec.bat") returned 0x0
	[0110.276] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="desktop.ini") returned 0x0
	[0110.276] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="autorun.inf") returned 0x0
	[0110.277] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="ntuser.dat") returned 0x0
	[0110.277] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="iconcache.db") returned 0x0
	[0110.277] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="bootsect.bak") returned 0x0
	[0110.277] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="boot.ini") returned 0x0
	[0110.277] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="bootfont.bin") returned 0x0
	[0110.277] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="config.sys") returned 0x0
	[0110.277] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="io.sys") returned 0x0
	[0110.277] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="msdos.sys") returned 0x0
	[0110.277] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="ntuser.dat.log") returned 0x0
	[0110.279] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="thumbs.db") returned 0x0
	[0110.279] StrStrW (lpFirst="aclviho asldjfl.contact", lpSrch="swapfile.sys") returned 0x0
	[0110.279] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0110.280] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=1178) returned 1
	[0110.280] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.281] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0110.295] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633088
	[0110.295] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0110.295] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0110.296] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.296] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0110.296] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.320] GetLastError () returned 0x3e5
	[0110.320] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0110.320] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
	[0110.320] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.331] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0110.331] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.331] StrStrW (lpFirst="administrator.contact", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.331] StrStrW (lpFirst="administrator.contact", lpSrch="ntldr") returned 0x0
	[0110.331] StrStrW (lpFirst="administrator.contact", lpSrch="pagefile.sys") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="ntdetect.com") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="autoexec.bat") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="desktop.ini") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="autorun.inf") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="ntuser.dat") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="iconcache.db") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="bootsect.bak") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="boot.ini") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="bootfont.bin") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="config.sys") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="io.sys") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="msdos.sys") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="ntuser.dat.log") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="thumbs.db") returned 0x0
	[0110.332] StrStrW (lpFirst="administrator.contact", lpSrch="swapfile.sys") returned 0x0
	[0110.332] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0110.332] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=68382) returned 1
	[0110.333] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.333] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0110.344] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0110.344] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0110.344] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633088) returned 1
	[0110.345] CryptGenRandom (in: hProv=0x633088, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.345] CryptReleaseContext (hProv=0x633088, dwFlags=0x0) returned 1
	[0110.345] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.352] GetLastError () returned 0x3e5
	[0110.352] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0110.352] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1
	[0110.352] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.352] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0110.352] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.362] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.362] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="ntldr") returned 0x0
	[0110.362] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="pagefile.sys") returned 0x0
	[0110.362] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="ntdetect.com") returned 0x0
	[0110.362] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="autoexec.bat") returned 0x0
	[0110.362] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="desktop.ini") returned 0x0
	[0110.362] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="autorun.inf") returned 0x0
	[0110.362] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="ntuser.dat") returned 0x0
	[0110.362] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="iconcache.db") returned 0x0
	[0110.362] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="bootsect.bak") returned 0x0
	[0110.362] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="boot.ini") returned 0x0
	[0110.363] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="bootfont.bin") returned 0x0
	[0110.363] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="config.sys") returned 0x0
	[0110.363] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="io.sys") returned 0x0
	[0110.363] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="msdos.sys") returned 0x0
	[0110.363] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="ntuser.dat.log") returned 0x0
	[0110.363] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="thumbs.db") returned 0x0
	[0110.363] StrStrW (lpFirst="asdlfk poopvy.contact", lpSrch="swapfile.sys") returned 0x0
	[0110.363] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0110.363] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=1171) returned 1
	[0110.363] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.363] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0110.375] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633088
	[0110.375] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0110.375] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0110.376] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.376] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0110.376] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0110.377] GetLastError () returned 0x3e5
	[0110.377] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0110.377] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1
	[0110.378] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.378] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0110.378] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="ntldr") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="pagefile.sys") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="ntdetect.com") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="autoexec.bat") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="desktop.ini") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="autorun.inf") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="ntuser.dat") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="iconcache.db") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="bootsect.bak") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="boot.ini") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="bootfont.bin") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="config.sys") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="io.sys") returned 0x0
	[0110.378] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="msdos.sys") returned 0x0
	[0110.379] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="ntuser.dat.log") returned 0x0
	[0110.379] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="thumbs.db") returned 0x0
	[0110.379] StrStrW (lpFirst="chucu jadnvk.contact", lpSrch="swapfile.sys") returned 0x0
	[0110.379] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0110.380] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=1177) returned 1
	[0110.380] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.380] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4ab0020
	[0110.391] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0110.391] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cfe8
	[0110.391] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0110.392] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.392] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0110.392] ReadFile (in: hFile=0x3c4, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0
	[0110.400] GetLastError () returned 0x3e5
	[0110.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0110.400] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0110.400] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.400] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0110.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.400] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.400] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0110.400] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0110.400] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0110.400] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0110.400] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0110.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0110.400] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1
	[0110.400] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.400] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0110.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.400] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="ntldr") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="pagefile.sys") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="ntdetect.com") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="autoexec.bat") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="desktop.ini") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="autorun.inf") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="ntuser.dat") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="iconcache.db") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="bootsect.bak") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="boot.ini") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="bootfont.bin") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="config.sys") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="io.sys") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="msdos.sys") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="ntuser.dat.log") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="thumbs.db") returned 0x0
	[0110.401] StrStrW (lpFirst="lulcit amkdfe.contact", lpSrch="swapfile.sys") returned 0x0
	[0110.401] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0110.402] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=1174) returned 1
	[0110.402] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.402] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4ab0020
	[0110.414] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0110.414] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cfe8
	[0110.414] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0110.415] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.415] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0110.415] ReadFile (in: hFile=0x3c4, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0
	[0110.766] GetLastError () returned 0x3e5
	[0110.766] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0110.766] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1
	[0110.766] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.766] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0110.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="ntldr") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="pagefile.sys") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="ntdetect.com") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="autoexec.bat") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="desktop.ini") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="autorun.inf") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="ntuser.dat") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="iconcache.db") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="bootsect.bak") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="boot.ini") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="bootfont.bin") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="config.sys") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="io.sys") returned 0x0
	[0110.767] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="msdos.sys") returned 0x0
	[0110.768] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="ntuser.dat.log") returned 0x0
	[0110.768] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="thumbs.db") returned 0x0
	[0110.768] StrStrW (lpFirst="sikvnb huvuib.contact", lpSrch="swapfile.sys") returned 0x0
	[0110.768] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0110.769] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=1172) returned 1
	[0110.769] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.769] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0110.779] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0110.780] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0110.780] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0110.781] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.781] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0110.781] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0110.786] GetLastError () returned 0x3e5
	[0110.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0110.787] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0
	[0110.787] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0110.787] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0110.787] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.787] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0110.787] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.787] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0110.787] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0110.788] CloseHandle (hObject=0x3bc) returned 1
	[0110.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0110.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0110.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0110.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0110.788] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0110.788] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665800
	[0110.788] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0110.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665800 | out: hHeap=0x5f0000) returned 1
	[0110.789] lstrcmpW (lpString1="..", lpString2="Cookies") returned -1
	[0110.789] lstrcmpW (lpString1=".", lpString2="Cookies") returned -1
	[0110.789] StrStrW (lpFirst="cookies", lpSrch="programdata") returned 0x0
	[0110.789] StrStrW (lpFirst="cookies", lpSrch="$recycle.bin") returned 0x0
	[0110.789] StrStrW (lpFirst="cookies", lpSrch="program files") returned 0x0
	[0110.789] StrStrW (lpFirst="cookies", lpSrch="windows") returned 0x0
	[0110.789] StrStrW (lpFirst="cookies", lpSrch="all users") returned 0x0
	[0110.789] StrStrW (lpFirst="cookies", lpSrch="winnt") returned 0x0
	[0110.789] StrStrW (lpFirst="cookies", lpSrch="appdata") returned 0x0
	[0110.789] StrStrW (lpFirst="cookies", lpSrch="application data") returned 0x0
	[0110.789] StrStrW (lpFirst="cookies", lpSrch="local settings") returned 0x0
	[0110.789] StrStrW (lpFirst="cookies", lpSrch="boot") returned 0x0
	[0110.789] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0110.789] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.789] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="䮸d勸cN")) returned 0xffffffff
	[0110.789] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.789] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0110.789] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0110.789] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x347987a0, ftLastAccessTime.dwHighDateTime=0x1d6bd30, ftLastWriteTime.dwLowDateTime=0x347987a0, ftLastWriteTime.dwHighDateTime=0x1d6bd30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0110.789] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665800
	[0110.790] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0110.790] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665800 | out: hHeap=0x5f0000) returned 1
	[0110.790] lstrcmpW (lpString1="..", lpString2="Desktop") returned -1
	[0110.790] lstrcmpW (lpString1=".", lpString2="Desktop") returned -1
	[0110.790] StrStrW (lpFirst="desktop", lpSrch="programdata") returned 0x0
	[0110.790] StrStrW (lpFirst="desktop", lpSrch="$recycle.bin") returned 0x0
	[0110.790] StrStrW (lpFirst="desktop", lpSrch="program files") returned 0x0
	[0110.790] StrStrW (lpFirst="desktop", lpSrch="windows") returned 0x0
	[0110.790] StrStrW (lpFirst="desktop", lpSrch="all users") returned 0x0
	[0110.790] StrStrW (lpFirst="desktop", lpSrch="winnt") returned 0x0
	[0110.790] StrStrW (lpFirst="desktop", lpSrch="appdata") returned 0x0
	[0110.790] StrStrW (lpFirst="desktop", lpSrch="application data") returned 0x0
	[0110.790] StrStrW (lpFirst="desktop", lpSrch="local settings") returned 0x0
	[0110.790] StrStrW (lpFirst="desktop", lpSrch="boot") returned 0x0
	[0110.790] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0110.790] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.790] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x347987a0, ftLastAccessTime.dwHighDateTime=0x1d6bd30, ftLastWriteTime.dwLowDateTime=0x347987a0, ftLastWriteTime.dwHighDateTime=0x1d6bd30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0110.790] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0110.790] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0110.790] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0110.790] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0110.790] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0110.790] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0110.790] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0110.790] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x347987a0, ftLastAccessTime.dwHighDateTime=0x1d6bd30, ftLastWriteTime.dwLowDateTime=0x347987a0, ftLastWriteTime.dwHighDateTime=0x1d6bd30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0110.791] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0110.791] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0110.791] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0110.791] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0110.791] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0110.791] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949c7f70, ftCreationTime.dwHighDateTime=0x1d5e3ce, ftLastAccessTime.dwLowDateTime=0xba950bf0, ftLastAccessTime.dwHighDateTime=0x1d5e7b3, ftLastWriteTime.dwLowDateTime=0xba950bf0, ftLastWriteTime.dwHighDateTime=0x1d5e7b3, nFileSizeHigh=0x0, nFileSizeLow=0x15983, dwReserved0=0x0, dwReserved1=0x0, cFileName="2_y.gif", cAlternateFileName="")) returned 1
	[0110.791] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0110.791] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0110.791] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="ntldr") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="pagefile.sys") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="ntdetect.com") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="autoexec.bat") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="desktop.ini") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="autorun.inf") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="ntuser.dat") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="iconcache.db") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="bootsect.bak") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="boot.ini") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="bootfont.bin") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="config.sys") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="io.sys") returned 0x0
	[0110.791] StrStrW (lpFirst="2_y.gif", lpSrch="msdos.sys") returned 0x0
	[0110.792] StrStrW (lpFirst="2_y.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0110.792] StrStrW (lpFirst="2_y.gif", lpSrch="thumbs.db") returned 0x0
	[0110.792] StrStrW (lpFirst="2_y.gif", lpSrch="swapfile.sys") returned 0x0
	[0110.792] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2_y.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2_y.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0110.792] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=88451) returned 1
	[0110.792] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.792] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0110.803] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0110.803] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0110.803] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0110.804] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.804] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0110.804] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0110.817] GetLastError () returned 0x3e5
	[0110.817] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0110.817] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcece8a0, ftCreationTime.dwHighDateTime=0x1d5e793, ftLastAccessTime.dwLowDateTime=0xddf28cb0, ftLastAccessTime.dwHighDateTime=0x1d5dd6a, ftLastWriteTime.dwLowDateTime=0xddf28cb0, ftLastWriteTime.dwHighDateTime=0x1d5dd6a, nFileSizeHigh=0x0, nFileSizeLow=0xc59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="5Rjw5.jpg", cAlternateFileName="")) returned 1
	[0110.817] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0110.817] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0110.817] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0110.817] StrStrW (lpFirst="5rjw5.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.817] StrStrW (lpFirst="5rjw5.jpg", lpSrch="ntldr") returned 0x0
	[0110.817] StrStrW (lpFirst="5rjw5.jpg", lpSrch="pagefile.sys") returned 0x0
	[0110.817] StrStrW (lpFirst="5rjw5.jpg", lpSrch="ntdetect.com") returned 0x0
	[0110.817] StrStrW (lpFirst="5rjw5.jpg", lpSrch="autoexec.bat") returned 0x0
	[0110.817] StrStrW (lpFirst="5rjw5.jpg", lpSrch="desktop.ini") returned 0x0
	[0110.817] StrStrW (lpFirst="5rjw5.jpg", lpSrch="autorun.inf") returned 0x0
	[0110.817] StrStrW (lpFirst="5rjw5.jpg", lpSrch="ntuser.dat") returned 0x0
	[0110.817] StrStrW (lpFirst="5rjw5.jpg", lpSrch="iconcache.db") returned 0x0
	[0110.817] StrStrW (lpFirst="5rjw5.jpg", lpSrch="bootsect.bak") returned 0x0
	[0110.817] StrStrW (lpFirst="5rjw5.jpg", lpSrch="boot.ini") returned 0x0
	[0110.818] StrStrW (lpFirst="5rjw5.jpg", lpSrch="bootfont.bin") returned 0x0
	[0110.818] StrStrW (lpFirst="5rjw5.jpg", lpSrch="config.sys") returned 0x0
	[0110.818] StrStrW (lpFirst="5rjw5.jpg", lpSrch="io.sys") returned 0x0
	[0110.818] StrStrW (lpFirst="5rjw5.jpg", lpSrch="msdos.sys") returned 0x0
	[0110.818] StrStrW (lpFirst="5rjw5.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0110.818] StrStrW (lpFirst="5rjw5.jpg", lpSrch="thumbs.db") returned 0x0
	[0110.818] StrStrW (lpFirst="5rjw5.jpg", lpSrch="swapfile.sys") returned 0x0
	[0110.818] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5Rjw5.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\5rjw5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0110.818] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=50589) returned 1
	[0110.818] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.818] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0110.828] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0110.829] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0110.829] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0110.829] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.829] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0110.829] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0110.838] GetLastError () returned 0x3e5
	[0110.838] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0110.838] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7b4ceb0, ftCreationTime.dwHighDateTime=0x1d5e438, ftLastAccessTime.dwLowDateTime=0xd14588e0, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xd14588e0, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x18116, dwReserved0=0x0, dwReserved1=0x0, cFileName="bDKvYp.mp4", cAlternateFileName="")) returned 1
	[0110.838] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0110.838] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0110.838] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0110.838] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.838] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="ntldr") returned 0x0
	[0110.838] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="pagefile.sys") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="ntdetect.com") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="autoexec.bat") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="desktop.ini") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="autorun.inf") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="ntuser.dat") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="iconcache.db") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="bootsect.bak") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="boot.ini") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="bootfont.bin") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="config.sys") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="io.sys") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="msdos.sys") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="thumbs.db") returned 0x0
	[0110.839] StrStrW (lpFirst="bdkvyp.mp4", lpSrch="swapfile.sys") returned 0x0
	[0110.839] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bDKvYp.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bdkvyp.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0110.839] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=98582) returned 1
	[0110.839] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.839] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0110.850] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0110.850] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0110.851] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0110.852] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.852] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0110.852] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0110.862] GetLastError () returned 0x3e5
	[0110.862] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0110.862] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50af4080, ftCreationTime.dwHighDateTime=0x1d5d93e, ftLastAccessTime.dwLowDateTime=0x2ec01280, ftLastAccessTime.dwHighDateTime=0x1d5db94, ftLastWriteTime.dwLowDateTime=0x2ec01280, ftLastWriteTime.dwHighDateTime=0x1d5db94, nFileSizeHigh=0x0, nFileSizeLow=0x570e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C4_k3VUR.gif", cAlternateFileName="")) returned 1
	[0110.862] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0110.862] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0110.863] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="ntldr") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="pagefile.sys") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="ntdetect.com") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="autoexec.bat") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="desktop.ini") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="autorun.inf") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="ntuser.dat") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="iconcache.db") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="bootsect.bak") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="boot.ini") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="bootfont.bin") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="config.sys") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="io.sys") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="msdos.sys") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="thumbs.db") returned 0x0
	[0110.863] StrStrW (lpFirst="c4_k3vur.gif", lpSrch="swapfile.sys") returned 0x0
	[0110.863] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\C4_k3VUR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c4_k3vur.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0110.864] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=22286) returned 1
	[0110.864] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.864] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0110.874] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0110.874] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0110.874] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0110.874] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.875] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0110.875] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0110.885] GetLastError () returned 0x3e5
	[0110.885] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0110.885] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ad07f60, ftCreationTime.dwHighDateTime=0x1d5e17a, ftLastAccessTime.dwLowDateTime=0x4f1f2620, ftLastAccessTime.dwHighDateTime=0x1d5e1fb, ftLastWriteTime.dwLowDateTime=0x4f1f2620, ftLastWriteTime.dwHighDateTime=0x1d5e1fb, nFileSizeHigh=0x0, nFileSizeLow=0xf2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CN2Yu0ZsD1xs5.ppt", cAlternateFileName="CN2YU0~1.PPT")) returned 1
	[0110.885] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0110.885] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0110.885] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0110.885] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.885] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="ntldr") returned 0x0
	[0110.885] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="pagefile.sys") returned 0x0
	[0110.885] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="ntdetect.com") returned 0x0
	[0110.885] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="autoexec.bat") returned 0x0
	[0110.885] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="desktop.ini") returned 0x0
	[0110.885] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="autorun.inf") returned 0x0
	[0110.885] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="ntuser.dat") returned 0x0
	[0110.885] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="iconcache.db") returned 0x0
	[0110.885] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="bootsect.bak") returned 0x0
	[0110.885] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="boot.ini") returned 0x0
	[0110.885] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="bootfont.bin") returned 0x0
	[0110.886] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="config.sys") returned 0x0
	[0110.886] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="io.sys") returned 0x0
	[0110.886] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="msdos.sys") returned 0x0
	[0110.886] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="ntuser.dat.log") returned 0x0
	[0110.886] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="thumbs.db") returned 0x0
	[0110.886] StrStrW (lpFirst="cn2yu0zsd1xs5.ppt", lpSrch="swapfile.sys") returned 0x0
	[0110.886] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CN2Yu0ZsD1xs5.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cn2yu0zsd1xs5.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0110.886] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=62162) returned 1
	[0110.886] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.886] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0110.896] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0110.896] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0110.896] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633088) returned 1
	[0110.897] CryptGenRandom (in: hProv=0x633088, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.897] CryptReleaseContext (hProv=0x633088, dwFlags=0x0) returned 1
	[0110.897] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0110.914] GetLastError () returned 0x3e5
	[0110.914] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0110.914] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0110.914] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0110.914] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0110.914] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0110.914] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.914] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0110.914] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0110.914] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0110.914] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0110.915] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0110.915] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0110.915] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd2283e0, ftCreationTime.dwHighDateTime=0x1d5e585, ftLastAccessTime.dwLowDateTime=0x65cc45a0, ftLastAccessTime.dwHighDateTime=0x1d5e1d4, ftLastWriteTime.dwLowDateTime=0x65cc45a0, ftLastWriteTime.dwHighDateTime=0x1d5e1d4, nFileSizeHigh=0x0, nFileSizeLow=0xa9fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN12F2.swf", cAlternateFileName="")) returned 1
	[0110.915] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0110.915] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0110.915] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="ntldr") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="pagefile.sys") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="ntdetect.com") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="autoexec.bat") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="desktop.ini") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="autorun.inf") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="ntuser.dat") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="iconcache.db") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="bootsect.bak") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="boot.ini") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="bootfont.bin") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="config.sys") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="io.sys") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="msdos.sys") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="ntuser.dat.log") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="thumbs.db") returned 0x0
	[0110.915] StrStrW (lpFirst="en12f2.swf", lpSrch="swapfile.sys") returned 0x0
	[0110.915] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EN12F2.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\en12f2.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0110.916] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=43518) returned 1
	[0110.916] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.916] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0110.926] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0110.926] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0110.926] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0110.927] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.927] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0110.927] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0110.977] GetLastError () returned 0x3e5
	[0110.977] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0110.977] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72f2de40, ftCreationTime.dwHighDateTime=0x1d5e2a8, ftLastAccessTime.dwLowDateTime=0x99df3210, ftLastAccessTime.dwHighDateTime=0x1d5e447, ftLastWriteTime.dwLowDateTime=0x99df3210, ftLastWriteTime.dwHighDateTime=0x1d5e447, nFileSizeHigh=0x0, nFileSizeLow=0xac15, dwReserved0=0x0, dwReserved1=0x0, cFileName="FdV5 UwoXLQ.csv", cAlternateFileName="FDV5UW~1.CSV")) returned 1
	[0110.977] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0110.977] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0110.977] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0110.977] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0110.977] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="ntldr") returned 0x0
	[0110.977] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="pagefile.sys") returned 0x0
	[0110.977] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="ntdetect.com") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="autoexec.bat") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="desktop.ini") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="autorun.inf") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="ntuser.dat") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="iconcache.db") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="bootsect.bak") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="boot.ini") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="bootfont.bin") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="config.sys") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="io.sys") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="msdos.sys") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="ntuser.dat.log") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="thumbs.db") returned 0x0
	[0110.978] StrStrW (lpFirst="fdv5 uwoxlq.csv", lpSrch="swapfile.sys") returned 0x0
	[0110.978] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FdV5 UwoXLQ.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fdv5 uwoxlq.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0110.978] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=44053) returned 1
	[0110.978] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0110.978] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0110.990] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0110.990] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0110.990] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0110.991] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0110.991] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0110.991] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0111.006] GetLastError () returned 0x3e5
	[0111.006] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0111.006] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf7de1f0, ftCreationTime.dwHighDateTime=0x1d5e809, ftLastAccessTime.dwLowDateTime=0x5e8fa210, ftLastAccessTime.dwHighDateTime=0x1d5e1fb, ftLastWriteTime.dwLowDateTime=0x5e8fa210, ftLastWriteTime.dwHighDateTime=0x1d5e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKlQd4kwD__P5I", cAlternateFileName="FKLQD4~1")) returned 1
	[0111.006] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0111.007] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0111.007] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0111.007] lstrcmpW (lpString1="..", lpString2="FKlQd4kwD__P5I") returned -1
	[0111.007] lstrcmpW (lpString1=".", lpString2="FKlQd4kwD__P5I") returned -1
	[0111.007] StrStrW (lpFirst="fklqd4kwd__p5i", lpSrch="programdata") returned 0x0
	[0111.007] StrStrW (lpFirst="fklqd4kwd__p5i", lpSrch="$recycle.bin") returned 0x0
	[0111.007] StrStrW (lpFirst="fklqd4kwd__p5i", lpSrch="program files") returned 0x0
	[0111.007] StrStrW (lpFirst="fklqd4kwd__p5i", lpSrch="windows") returned 0x0
	[0111.007] StrStrW (lpFirst="fklqd4kwd__p5i", lpSrch="all users") returned 0x0
	[0111.007] StrStrW (lpFirst="fklqd4kwd__p5i", lpSrch="winnt") returned 0x0
	[0111.007] StrStrW (lpFirst="fklqd4kwd__p5i", lpSrch="appdata") returned 0x0
	[0111.007] StrStrW (lpFirst="fklqd4kwd__p5i", lpSrch="application data") returned 0x0
	[0111.007] StrStrW (lpFirst="fklqd4kwd__p5i", lpSrch="local settings") returned 0x0
	[0111.007] StrStrW (lpFirst="fklqd4kwd__p5i", lpSrch="boot") returned 0x0
	[0111.007] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0111.007] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0111.007] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf7de1f0, ftCreationTime.dwHighDateTime=0x1d5e809, ftLastAccessTime.dwLowDateTime=0x5e8fa210, ftLastAccessTime.dwHighDateTime=0x1d5e1fb, ftLastWriteTime.dwLowDateTime=0x5e8fa210, ftLastWriteTime.dwHighDateTime=0x1d5e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea10
	[0111.007] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0111.007] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0111.007] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.008] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.008] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0111.008] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf7de1f0, ftCreationTime.dwHighDateTime=0x1d5e809, ftLastAccessTime.dwLowDateTime=0x5e8fa210, ftLastAccessTime.dwHighDateTime=0x1d5e1fb, ftLastWriteTime.dwLowDateTime=0x5e8fa210, ftLastWriteTime.dwHighDateTime=0x1d5e1fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0111.008] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0111.008] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0111.008] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0111.008] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.008] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0111.008] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d47e90, ftCreationTime.dwHighDateTime=0x1d5d9a3, ftLastAccessTime.dwLowDateTime=0xe7d65c0, ftLastAccessTime.dwHighDateTime=0x1d5e56e, ftLastWriteTime.dwLowDateTime=0xe7d65c0, ftLastWriteTime.dwHighDateTime=0x1d5e56e, nFileSizeHigh=0x0, nFileSizeLow=0xacc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="4caPG5v.bmp", cAlternateFileName="")) returned 1
	[0111.008] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0111.008] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0111.008] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0111.008] StrStrW (lpFirst="4capg5v.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.008] StrStrW (lpFirst="4capg5v.bmp", lpSrch="ntldr") returned 0x0
	[0111.008] StrStrW (lpFirst="4capg5v.bmp", lpSrch="pagefile.sys") returned 0x0
	[0111.008] StrStrW (lpFirst="4capg5v.bmp", lpSrch="ntdetect.com") returned 0x0
	[0111.008] StrStrW (lpFirst="4capg5v.bmp", lpSrch="autoexec.bat") returned 0x0
	[0111.008] StrStrW (lpFirst="4capg5v.bmp", lpSrch="desktop.ini") returned 0x0
	[0111.008] StrStrW (lpFirst="4capg5v.bmp", lpSrch="autorun.inf") returned 0x0
	[0111.008] StrStrW (lpFirst="4capg5v.bmp", lpSrch="ntuser.dat") returned 0x0
	[0111.008] StrStrW (lpFirst="4capg5v.bmp", lpSrch="iconcache.db") returned 0x0
	[0111.008] StrStrW (lpFirst="4capg5v.bmp", lpSrch="bootsect.bak") returned 0x0
	[0111.008] StrStrW (lpFirst="4capg5v.bmp", lpSrch="boot.ini") returned 0x0
	[0111.009] StrStrW (lpFirst="4capg5v.bmp", lpSrch="bootfont.bin") returned 0x0
	[0111.009] StrStrW (lpFirst="4capg5v.bmp", lpSrch="config.sys") returned 0x0
	[0111.009] StrStrW (lpFirst="4capg5v.bmp", lpSrch="io.sys") returned 0x0
	[0111.009] StrStrW (lpFirst="4capg5v.bmp", lpSrch="msdos.sys") returned 0x0
	[0111.009] StrStrW (lpFirst="4capg5v.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0111.009] StrStrW (lpFirst="4capg5v.bmp", lpSrch="thumbs.db") returned 0x0
	[0111.009] StrStrW (lpFirst="4capg5v.bmp", lpSrch="swapfile.sys") returned 0x0
	[0111.009] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\4caPG5v.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\4capg5v.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.009] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=44226) returned 1
	[0111.009] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.009] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0111.021] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0111.021] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351dae0
	[0111.021] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633198) returned 1
	[0111.022] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.022] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0111.022] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0111.030] GetLastError () returned 0x3e5
	[0111.030] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0111.030] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e6afdf0, ftCreationTime.dwHighDateTime=0x1d5de8a, ftLastAccessTime.dwLowDateTime=0x548c290, ftLastAccessTime.dwHighDateTime=0x1d5d93b, ftLastWriteTime.dwLowDateTime=0x548c290, ftLastWriteTime.dwHighDateTime=0x1d5d93b, nFileSizeHigh=0x0, nFileSizeLow=0x17b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="g42u5H.mp4", cAlternateFileName="")) returned 1
	[0111.030] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0111.030] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0111.030] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0111.030] StrStrW (lpFirst="g42u5h.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.030] StrStrW (lpFirst="g42u5h.mp4", lpSrch="ntldr") returned 0x0
	[0111.030] StrStrW (lpFirst="g42u5h.mp4", lpSrch="pagefile.sys") returned 0x0
	[0111.030] StrStrW (lpFirst="g42u5h.mp4", lpSrch="ntdetect.com") returned 0x0
	[0111.030] StrStrW (lpFirst="g42u5h.mp4", lpSrch="autoexec.bat") returned 0x0
	[0111.030] StrStrW (lpFirst="g42u5h.mp4", lpSrch="desktop.ini") returned 0x0
	[0111.030] StrStrW (lpFirst="g42u5h.mp4", lpSrch="autorun.inf") returned 0x0
	[0111.030] StrStrW (lpFirst="g42u5h.mp4", lpSrch="ntuser.dat") returned 0x0
	[0111.031] StrStrW (lpFirst="g42u5h.mp4", lpSrch="iconcache.db") returned 0x0
	[0111.031] StrStrW (lpFirst="g42u5h.mp4", lpSrch="bootsect.bak") returned 0x0
	[0111.031] StrStrW (lpFirst="g42u5h.mp4", lpSrch="boot.ini") returned 0x0
	[0111.031] StrStrW (lpFirst="g42u5h.mp4", lpSrch="bootfont.bin") returned 0x0
	[0111.031] StrStrW (lpFirst="g42u5h.mp4", lpSrch="config.sys") returned 0x0
	[0111.031] StrStrW (lpFirst="g42u5h.mp4", lpSrch="io.sys") returned 0x0
	[0111.031] StrStrW (lpFirst="g42u5h.mp4", lpSrch="msdos.sys") returned 0x0
	[0111.031] StrStrW (lpFirst="g42u5h.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0111.031] StrStrW (lpFirst="g42u5h.mp4", lpSrch="thumbs.db") returned 0x0
	[0111.031] StrStrW (lpFirst="g42u5h.mp4", lpSrch="swapfile.sys") returned 0x0
	[0111.031] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\g42u5H.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\g42u5h.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.031] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=97091) returned 1
	[0111.031] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.031] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0111.043] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0111.043] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351dae0
	[0111.043] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633198) returned 1
	[0111.044] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.044] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0111.045] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0111.053] GetLastError () returned 0x3e5
	[0111.053] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0111.053] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a31da50, ftCreationTime.dwHighDateTime=0x1d5e738, ftLastAccessTime.dwLowDateTime=0x1823cd0, ftLastAccessTime.dwHighDateTime=0x1d5da7c, ftLastWriteTime.dwLowDateTime=0x1823cd0, ftLastWriteTime.dwHighDateTime=0x1d5da7c, nFileSizeHigh=0x0, nFileSizeLow=0x12877, dwReserved0=0x0, dwReserved1=0x0, cFileName="t-HIGqHc1g5oQmZj.mkv", cAlternateFileName="T-HIGQ~1.MKV")) returned 1
	[0111.053] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0111.053] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0111.053] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0111.053] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.053] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="ntldr") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="pagefile.sys") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="ntdetect.com") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="autoexec.bat") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="desktop.ini") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="autorun.inf") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="ntuser.dat") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="iconcache.db") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="bootsect.bak") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="boot.ini") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="bootfont.bin") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="config.sys") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="io.sys") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="msdos.sys") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="ntuser.dat.log") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="thumbs.db") returned 0x0
	[0111.054] StrStrW (lpFirst="t-higqhc1g5oqmzj.mkv", lpSrch="swapfile.sys") returned 0x0
	[0111.054] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\t-HIGqHc1g5oQmZj.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\t-higqhc1g5oqmzj.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.055] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=75895) returned 1
	[0111.055] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.055] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0111.066] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0111.066] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351dae0
	[0111.066] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633198) returned 1
	[0111.067] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.067] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0111.067] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0111.082] GetLastError () returned 0x3e5
	[0111.082] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0111.082] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e6f06d0, ftCreationTime.dwHighDateTime=0x1d5e287, ftLastAccessTime.dwLowDateTime=0x3e2a5540, ftLastAccessTime.dwHighDateTime=0x1d5ddf7, ftLastWriteTime.dwLowDateTime=0x3e2a5540, ftLastWriteTime.dwHighDateTime=0x1d5ddf7, nFileSizeHigh=0x0, nFileSizeLow=0xcf3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WJ4vLnFoRTTcZId.wav", cAlternateFileName="WJ4VLN~1.WAV")) returned 1
	[0111.082] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0111.082] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0111.082] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0111.082] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="ntldr") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="pagefile.sys") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="ntdetect.com") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="autoexec.bat") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="desktop.ini") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="autorun.inf") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="ntuser.dat") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="iconcache.db") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="bootsect.bak") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="boot.ini") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="bootfont.bin") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="config.sys") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="io.sys") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="msdos.sys") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="thumbs.db") returned 0x0
	[0111.083] StrStrW (lpFirst="wj4vlnforttczid.wav", lpSrch="swapfile.sys") returned 0x0
	[0111.083] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\WJ4vLnFoRTTcZId.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\wj4vlnforttczid.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.083] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=53055) returned 1
	[0111.084] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.084] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0111.095] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0111.095] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351dae0
	[0111.095] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633198) returned 1
	[0111.096] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.096] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0111.096] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0111.108] GetLastError () returned 0x3e5
	[0111.108] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0111.108] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c732d20, ftCreationTime.dwHighDateTime=0x1d5e403, ftLastAccessTime.dwLowDateTime=0xc8d1f9f0, ftLastAccessTime.dwHighDateTime=0x1d5e63f, ftLastWriteTime.dwLowDateTime=0xc8d1f9f0, ftLastWriteTime.dwHighDateTime=0x1d5e63f, nFileSizeHigh=0x0, nFileSizeLow=0x16b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zb1DwUD.rtf", cAlternateFileName="")) returned 1
	[0111.109] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0111.109] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0111.109] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="ntldr") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="pagefile.sys") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="ntdetect.com") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="autoexec.bat") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="desktop.ini") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="autorun.inf") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="ntuser.dat") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="iconcache.db") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="bootsect.bak") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="boot.ini") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="bootfont.bin") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="config.sys") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="io.sys") returned 0x0
	[0111.109] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="msdos.sys") returned 0x0
	[0111.110] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="ntuser.dat.log") returned 0x0
	[0111.110] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="thumbs.db") returned 0x0
	[0111.110] StrStrW (lpFirst="zb1dwud.rtf", lpSrch="swapfile.sys") returned 0x0
	[0111.110] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\Zb1DwUD.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\zb1dwud.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0111.110] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=93048) returned 1
	[0111.110] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.110] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4ab0020
	[0111.122] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0111.122] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351dff0
	[0111.122] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633198) returned 1
	[0111.123] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.123] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0111.124] ReadFile (in: hFile=0x3c8, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0
	[0111.132] GetLastError () returned 0x3e5
	[0111.132] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0111.132] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c732d20, ftCreationTime.dwHighDateTime=0x1d5e403, ftLastAccessTime.dwLowDateTime=0xc8d1f9f0, ftLastAccessTime.dwHighDateTime=0x1d5e63f, ftLastWriteTime.dwLowDateTime=0xc8d1f9f0, ftLastWriteTime.dwHighDateTime=0x1d5e63f, nFileSizeHigh=0x0, nFileSizeLow=0x16b78, dwReserved0=0x0, dwReserved1=0x0, cFileName="zb1dwud.rtf", cAlternateFileName="")) returned 0
	[0111.132] FindClose (in: hFindFile=0x61ea10 | out: hFindFile=0x61ea10) returned 1
	[0111.132] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0111.132] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0111.132] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0111.132] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526400 | out: hHeap=0x5f0000) returned 1
	[0111.133] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\FKlQd4kwD__P5I\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fklqd4kwd__p5i\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c4
	[0111.133] WriteFile (in: hFile=0x3c4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0111.134] CloseHandle (hObject=0x3c4) returned 1
	[0111.134] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0111.134] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0111.134] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0111.134] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0111.134] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7bb95440, ftCreationTime.dwHighDateTime=0x1d5e10f, ftLastAccessTime.dwLowDateTime=0xec639340, ftLastAccessTime.dwHighDateTime=0x1d5daa7, ftLastWriteTime.dwLowDateTime=0xec639340, ftLastWriteTime.dwHighDateTime=0x1d5daa7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HbthB3jQFU5Y-AjNk", cAlternateFileName="HBTHB3~1")) returned 1
	[0111.134] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0111.134] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0111.134] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0111.134] lstrcmpW (lpString1="..", lpString2="HbthB3jQFU5Y-AjNk") returned -1
	[0111.134] lstrcmpW (lpString1=".", lpString2="HbthB3jQFU5Y-AjNk") returned -1
	[0111.135] StrStrW (lpFirst="hbthb3jqfu5y-ajnk", lpSrch="programdata") returned 0x0
	[0111.135] StrStrW (lpFirst="hbthb3jqfu5y-ajnk", lpSrch="$recycle.bin") returned 0x0
	[0111.135] StrStrW (lpFirst="hbthb3jqfu5y-ajnk", lpSrch="program files") returned 0x0
	[0111.135] StrStrW (lpFirst="hbthb3jqfu5y-ajnk", lpSrch="windows") returned 0x0
	[0111.135] StrStrW (lpFirst="hbthb3jqfu5y-ajnk", lpSrch="all users") returned 0x0
	[0111.135] StrStrW (lpFirst="hbthb3jqfu5y-ajnk", lpSrch="winnt") returned 0x0
	[0111.135] StrStrW (lpFirst="hbthb3jqfu5y-ajnk", lpSrch="appdata") returned 0x0
	[0111.135] StrStrW (lpFirst="hbthb3jqfu5y-ajnk", lpSrch="application data") returned 0x0
	[0111.135] StrStrW (lpFirst="hbthb3jqfu5y-ajnk", lpSrch="local settings") returned 0x0
	[0111.135] StrStrW (lpFirst="hbthb3jqfu5y-ajnk", lpSrch="boot") returned 0x0
	[0111.135] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633088
	[0111.135] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.135] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7bb95440, ftCreationTime.dwHighDateTime=0x1d5e10f, ftLastAccessTime.dwLowDateTime=0xec639340, ftLastAccessTime.dwHighDateTime=0x1d5daa7, ftLastWriteTime.dwLowDateTime=0xec639340, ftLastWriteTime.dwHighDateTime=0x1d5daa7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea10
	[0111.135] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.135] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.248] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.248] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.248] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.248] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7bb95440, ftCreationTime.dwHighDateTime=0x1d5e10f, ftLastAccessTime.dwLowDateTime=0xec639340, ftLastAccessTime.dwHighDateTime=0x1d5daa7, ftLastWriteTime.dwLowDateTime=0xec639340, ftLastWriteTime.dwHighDateTime=0x1d5daa7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0111.249] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.249] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.249] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.249] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d939330, ftCreationTime.dwHighDateTime=0x1d5e2b5, ftLastAccessTime.dwLowDateTime=0xceb22040, ftLastAccessTime.dwHighDateTime=0x1d5dd50, ftLastWriteTime.dwLowDateTime=0xceb22040, ftLastWriteTime.dwHighDateTime=0x1d5dd50, nFileSizeHigh=0x0, nFileSizeLow=0x112b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="3b2UJTWoz6ufeXlyvISW.png", cAlternateFileName="3B2UJT~1.PNG")) returned 1
	[0111.249] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.249] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x3510048
	[0111.249] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.249] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.249] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="ntldr") returned 0x0
	[0111.249] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="pagefile.sys") returned 0x0
	[0111.249] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="ntdetect.com") returned 0x0
	[0111.249] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="autoexec.bat") returned 0x0
	[0111.249] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="desktop.ini") returned 0x0
	[0111.249] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="autorun.inf") returned 0x0
	[0111.249] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="ntuser.dat") returned 0x0
	[0111.249] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="iconcache.db") returned 0x0
	[0111.250] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="bootsect.bak") returned 0x0
	[0111.250] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="boot.ini") returned 0x0
	[0111.250] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="bootfont.bin") returned 0x0
	[0111.250] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="config.sys") returned 0x0
	[0111.250] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="io.sys") returned 0x0
	[0111.250] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="msdos.sys") returned 0x0
	[0111.250] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="ntuser.dat.log") returned 0x0
	[0111.250] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="thumbs.db") returned 0x0
	[0111.250] StrStrW (lpFirst="3b2ujtwoz6ufexlyvisw.png", lpSrch="swapfile.sys") returned 0x0
	[0111.250] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\3b2UJTWoz6ufeXlyvISW.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\3b2ujtwoz6ufexlyvisw.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.250] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=70326) returned 1
	[0111.250] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.250] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0111.261] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3510110
	[0111.261] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x40819f8
	[0111.261] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0111.262] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.262] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0111.262] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0111.274] GetLastError () returned 0x3e5
	[0111.274] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510048 | out: hHeap=0x5f0000) returned 1
	[0111.274] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x546691d0, ftCreationTime.dwHighDateTime=0x1d5e102, ftLastAccessTime.dwLowDateTime=0x71839bc0, ftLastAccessTime.dwHighDateTime=0x1d5d971, ftLastWriteTime.dwLowDateTime=0x71839bc0, ftLastWriteTime.dwHighDateTime=0x1d5d971, nFileSizeHigh=0x0, nFileSizeLow=0xdca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bpw79uT.bmp", cAlternateFileName="")) returned 1
	[0111.274] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.274] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x3510048
	[0111.274] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.274] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="ntldr") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="pagefile.sys") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="ntdetect.com") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="autoexec.bat") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="desktop.ini") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="autorun.inf") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="ntuser.dat") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="iconcache.db") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="bootsect.bak") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="boot.ini") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="bootfont.bin") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="config.sys") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="io.sys") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="msdos.sys") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="thumbs.db") returned 0x0
	[0111.275] StrStrW (lpFirst="bpw79ut.bmp", lpSrch="swapfile.sys") returned 0x0
	[0111.275] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\bpw79uT.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\bpw79ut.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.275] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=56486) returned 1
	[0111.275] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.276] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0111.287] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0111.287] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x40819f8
	[0111.287] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0111.288] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.288] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0111.288] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0111.302] GetLastError () returned 0x3e5
	[0111.302] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510048 | out: hHeap=0x5f0000) returned 1
	[0111.302] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f0d2d0, ftCreationTime.dwHighDateTime=0x1d5ddaa, ftLastAccessTime.dwLowDateTime=0x2f546cb0, ftLastAccessTime.dwHighDateTime=0x1d5d846, ftLastWriteTime.dwLowDateTime=0x2f546cb0, ftLastWriteTime.dwHighDateTime=0x1d5d846, nFileSizeHigh=0x0, nFileSizeLow=0x237c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CzpEkctADL.mp3", cAlternateFileName="CZPEKC~1.MP3")) returned 1
	[0111.302] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.303] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x3510048
	[0111.303] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="ntldr") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="pagefile.sys") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="ntdetect.com") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="autoexec.bat") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="desktop.ini") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="autorun.inf") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="ntuser.dat") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="iconcache.db") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="bootsect.bak") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="boot.ini") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="bootfont.bin") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="config.sys") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="io.sys") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="msdos.sys") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="thumbs.db") returned 0x0
	[0111.303] StrStrW (lpFirst="czpekctadl.mp3", lpSrch="swapfile.sys") returned 0x0
	[0111.303] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\CzpEkctADL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\czpekctadl.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.304] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=9084) returned 1
	[0111.304] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.304] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0111.314] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0111.314] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x40819f8
	[0111.314] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0111.315] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.315] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0111.315] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0111.324] GetLastError () returned 0x3e5
	[0111.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510048 | out: hHeap=0x5f0000) returned 1
	[0111.324] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd178b60, ftCreationTime.dwHighDateTime=0x1d5dbbc, ftLastAccessTime.dwLowDateTime=0xac85a930, ftLastAccessTime.dwHighDateTime=0x1d5dbd7, ftLastWriteTime.dwLowDateTime=0xac85a930, ftLastWriteTime.dwHighDateTime=0x1d5dbd7, nFileSizeHigh=0x0, nFileSizeLow=0x6a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="fCuusX4CV6rTKR6S.ppt", cAlternateFileName="FCUUSX~1.PPT")) returned 1
	[0111.324] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.324] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x3510048
	[0111.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.324] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.324] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="ntldr") returned 0x0
	[0111.324] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="pagefile.sys") returned 0x0
	[0111.324] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="ntdetect.com") returned 0x0
	[0111.324] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="autoexec.bat") returned 0x0
	[0111.324] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="desktop.ini") returned 0x0
	[0111.324] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="autorun.inf") returned 0x0
	[0111.324] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="ntuser.dat") returned 0x0
	[0111.324] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="iconcache.db") returned 0x0
	[0111.325] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="bootsect.bak") returned 0x0
	[0111.325] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="boot.ini") returned 0x0
	[0111.325] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="bootfont.bin") returned 0x0
	[0111.325] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="config.sys") returned 0x0
	[0111.325] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="io.sys") returned 0x0
	[0111.325] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="msdos.sys") returned 0x0
	[0111.325] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="ntuser.dat.log") returned 0x0
	[0111.325] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="thumbs.db") returned 0x0
	[0111.325] StrStrW (lpFirst="fcuusx4cv6rtkr6s.ppt", lpSrch="swapfile.sys") returned 0x0
	[0111.325] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\fCuusX4CV6rTKR6S.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\fcuusx4cv6rtkr6s.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.325] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=27224) returned 1
	[0111.326] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.326] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0111.339] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0111.339] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x40819f8
	[0111.339] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0111.340] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.341] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0111.341] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0111.350] GetLastError () returned 0x3e5
	[0111.350] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510048 | out: hHeap=0x5f0000) returned 1
	[0111.350] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6cfb640, ftCreationTime.dwHighDateTime=0x1d5e077, ftLastAccessTime.dwLowDateTime=0x3abe9f60, ftLastAccessTime.dwHighDateTime=0x1d5db77, ftLastWriteTime.dwLowDateTime=0x3abe9f60, ftLastWriteTime.dwHighDateTime=0x1d5db77, nFileSizeHigh=0x0, nFileSizeLow=0xedde, dwReserved0=0x0, dwReserved1=0x0, cFileName="iB_721DN-zYKJuMnIh.mp4", cAlternateFileName="IB_721~1.MP4")) returned 1
	[0111.350] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.350] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x3510048
	[0111.351] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="ntldr") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="pagefile.sys") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="ntdetect.com") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="autoexec.bat") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="desktop.ini") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="autorun.inf") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="ntuser.dat") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="iconcache.db") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="bootsect.bak") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="boot.ini") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="bootfont.bin") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="config.sys") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="io.sys") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="msdos.sys") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="thumbs.db") returned 0x0
	[0111.351] StrStrW (lpFirst="ib_721dn-zykjumnih.mp4", lpSrch="swapfile.sys") returned 0x0
	[0111.351] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\iB_721DN-zYKJuMnIh.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\ib_721dn-zykjumnih.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.352] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=60894) returned 1
	[0111.352] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.352] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0111.363] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0111.363] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x40819f8
	[0111.363] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0111.364] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.364] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0111.364] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0111.372] GetLastError () returned 0x3e5
	[0111.372] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510048 | out: hHeap=0x5f0000) returned 1
	[0111.372] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x268cd250, ftCreationTime.dwHighDateTime=0x1d5dc5d, ftLastAccessTime.dwLowDateTime=0x834ae7f0, ftLastAccessTime.dwHighDateTime=0x1d5e501, ftLastWriteTime.dwLowDateTime=0x834ae7f0, ftLastWriteTime.dwHighDateTime=0x1d5e501, nFileSizeHigh=0x0, nFileSizeLow=0x2af6, dwReserved0=0x0, dwReserved1=0x0, cFileName="qPQBIwc1V.bmp", cAlternateFileName="QPQBIW~1.BMP")) returned 1
	[0111.372] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.372] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x3510048
	[0111.372] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.372] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="ntldr") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="pagefile.sys") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="ntdetect.com") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="autoexec.bat") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="desktop.ini") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="autorun.inf") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="ntuser.dat") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="iconcache.db") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="bootsect.bak") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="boot.ini") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="bootfont.bin") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="config.sys") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="io.sys") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="msdos.sys") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="thumbs.db") returned 0x0
	[0111.373] StrStrW (lpFirst="qpqbiwc1v.bmp", lpSrch="swapfile.sys") returned 0x0
	[0111.373] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\qPQBIwc1V.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\qpqbiwc1v.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.373] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=10998) returned 1
	[0111.374] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.374] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0111.384] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0111.384] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x40819f8
	[0111.384] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0111.386] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.386] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0111.386] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0111.397] GetLastError () returned 0x3e5
	[0111.397] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510048 | out: hHeap=0x5f0000) returned 1
	[0111.397] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x927800d0, ftCreationTime.dwHighDateTime=0x1d5dd83, ftLastAccessTime.dwLowDateTime=0x1ebcb190, ftLastAccessTime.dwHighDateTime=0x1d5dda6, ftLastWriteTime.dwLowDateTime=0x1ebcb190, ftLastWriteTime.dwHighDateTime=0x1d5dda6, nFileSizeHigh=0x0, nFileSizeLow=0xbf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="uVCMJbA.mp3", cAlternateFileName="")) returned 1
	[0111.397] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.397] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x3510048
	[0111.397] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="ntldr") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="pagefile.sys") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="ntdetect.com") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="autoexec.bat") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="desktop.ini") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="autorun.inf") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="ntuser.dat") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="iconcache.db") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="bootsect.bak") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="boot.ini") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="bootfont.bin") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="config.sys") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="io.sys") returned 0x0
	[0111.397] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="msdos.sys") returned 0x0
	[0111.398] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0111.398] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="thumbs.db") returned 0x0
	[0111.398] StrStrW (lpFirst="uvcmjba.mp3", lpSrch="swapfile.sys") returned 0x0
	[0111.398] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\uVCMJbA.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\uvcmjba.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.398] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=48932) returned 1
	[0111.398] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.398] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0111.410] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0111.410] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x40819f8
	[0111.410] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0111.411] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.411] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0111.411] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0111.565] GetLastError () returned 0x3e5
	[0111.565] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510048 | out: hHeap=0x5f0000) returned 1
	[0111.565] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x927800d0, ftCreationTime.dwHighDateTime=0x1d5dd83, ftLastAccessTime.dwLowDateTime=0x1ebcb190, ftLastAccessTime.dwHighDateTime=0x1d5dda6, ftLastWriteTime.dwLowDateTime=0x1ebcb190, ftLastWriteTime.dwHighDateTime=0x1d5dda6, nFileSizeHigh=0x0, nFileSizeLow=0xbf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="uvcmjba.mp3", cAlternateFileName="")) returned 0
	[0111.565] FindClose (in: hFindFile=0x61ea10 | out: hFindFile=0x61ea10) returned 1
	[0111.565] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0111.565] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.565] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x3510048
	[0111.565] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0111.565] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HbthB3jQFU5Y-AjNk\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hbthb3jqfu5y-ajnk\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c4
	[0111.566] WriteFile (in: hFile=0x3c4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0111.567] CloseHandle (hObject=0x3c4) returned 1
	[0111.567] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3510048 | out: hHeap=0x5f0000) returned 1
	[0111.567] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0111.567] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633088 | out: hHeap=0x5f0000) returned 1
	[0111.567] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0111.568] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27175e0, ftCreationTime.dwHighDateTime=0x1d5defd, ftLastAccessTime.dwLowDateTime=0xa9c3b930, ftLastAccessTime.dwHighDateTime=0x1d5e25d, ftLastWriteTime.dwLowDateTime=0xa9c3b930, ftLastWriteTime.dwHighDateTime=0x1d5e25d, nFileSizeHigh=0x0, nFileSizeLow=0x1582a, dwReserved0=0x0, dwReserved1=0x0, cFileName="j722vbf_9c6.pps", cAlternateFileName="J722VB~1.PPS")) returned 1
	[0111.568] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0111.568] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0111.568] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="ntldr") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="pagefile.sys") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="ntdetect.com") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="autoexec.bat") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="desktop.ini") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="autorun.inf") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="ntuser.dat") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="iconcache.db") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="bootsect.bak") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="boot.ini") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="bootfont.bin") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="config.sys") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="io.sys") returned 0x0
	[0111.568] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="msdos.sys") returned 0x0
	[0111.569] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="ntuser.dat.log") returned 0x0
	[0111.569] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="thumbs.db") returned 0x0
	[0111.569] StrStrW (lpFirst="j722vbf_9c6.pps", lpSrch="swapfile.sys") returned 0x0
	[0111.569] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j722vbf_9c6.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\j722vbf_9c6.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0111.569] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=88106) returned 1
	[0111.569] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.569] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0111.579] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0111.579] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x40819f8
	[0111.579] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0111.580] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0111.580] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0111.580] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0111.587] GetLastError () returned 0x3e5
	[0111.587] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0111.587] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf68434e0, ftCreationTime.dwHighDateTime=0x1d5dbe9, ftLastAccessTime.dwLowDateTime=0x1b55530, ftLastAccessTime.dwHighDateTime=0x1d5df26, ftLastWriteTime.dwLowDateTime=0x1b55530, ftLastWriteTime.dwHighDateTime=0x1d5df26, nFileSizeHigh=0x0, nFileSizeLow=0x154e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="KffIUrJUk.swf", cAlternateFileName="KFFIUR~1.SWF")) returned 1
	[0111.587] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0111.587] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0111.587] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0111.587] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.587] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="ntldr") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="pagefile.sys") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="ntdetect.com") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="autoexec.bat") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="desktop.ini") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="autorun.inf") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="ntuser.dat") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="iconcache.db") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="bootsect.bak") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="boot.ini") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="bootfont.bin") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="config.sys") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="io.sys") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="msdos.sys") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="ntuser.dat.log") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="thumbs.db") returned 0x0
	[0111.588] StrStrW (lpFirst="kffiurjuk.swf", lpSrch="swapfile.sys") returned 0x0
	[0111.588] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KffIUrJUk.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kffiurjuk.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0111.589] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=87266) returned 1
	[0111.589] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.589] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0111.599] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526400
	[0111.599] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x40819f8
	[0111.599] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0111.600] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0111.600] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0111.600] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0111.603] GetLastError () returned 0x3e5
	[0111.603] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0111.603] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23bd370, ftCreationTime.dwHighDateTime=0x1d5e10c, ftLastAccessTime.dwLowDateTime=0x866a7950, ftLastAccessTime.dwHighDateTime=0x1d5d7cd, ftLastWriteTime.dwLowDateTime=0x866a7950, ftLastWriteTime.dwHighDateTime=0x1d5d7cd, nFileSizeHigh=0x0, nFileSizeLow=0x892a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mZQFpBApMY.mkv", cAlternateFileName="MZQFPB~1.MKV")) returned 1
	[0111.603] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0111.603] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0111.603] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0111.603] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.603] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="ntldr") returned 0x0
	[0111.603] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="pagefile.sys") returned 0x0
	[0111.603] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="ntdetect.com") returned 0x0
	[0111.603] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="autoexec.bat") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="desktop.ini") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="autorun.inf") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="ntuser.dat") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="iconcache.db") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="bootsect.bak") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="boot.ini") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="bootfont.bin") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="config.sys") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="io.sys") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="msdos.sys") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="ntuser.dat.log") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="thumbs.db") returned 0x0
	[0111.604] StrStrW (lpFirst="mzqfpbapmy.mkv", lpSrch="swapfile.sys") returned 0x0
	[0111.604] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mZQFpBApMY.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mzqfpbapmy.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.604] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=35114) returned 1
	[0111.604] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.605] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0111.614] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0111.614] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0111.614] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0111.615] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0111.615] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0111.615] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0111.622] GetLastError () returned 0x3e5
	[0111.622] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0111.622] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5d69bd0, ftCreationTime.dwHighDateTime=0x1d5df83, ftLastAccessTime.dwLowDateTime=0x7dd9be70, ftLastAccessTime.dwHighDateTime=0x1d5e16b, ftLastWriteTime.dwLowDateTime=0x7dd9be70, ftLastWriteTime.dwHighDateTime=0x1d5e16b, nFileSizeHigh=0x0, nFileSizeLow=0x2961, dwReserved0=0x0, dwReserved1=0x0, cFileName="nZcAIi.csv", cAlternateFileName="")) returned 1
	[0111.622] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0111.622] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0111.622] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0111.622] StrStrW (lpFirst="nzcaii.csv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.622] StrStrW (lpFirst="nzcaii.csv", lpSrch="ntldr") returned 0x0
	[0111.622] StrStrW (lpFirst="nzcaii.csv", lpSrch="pagefile.sys") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="ntdetect.com") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="autoexec.bat") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="desktop.ini") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="autorun.inf") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="ntuser.dat") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="iconcache.db") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="bootsect.bak") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="boot.ini") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="bootfont.bin") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="config.sys") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="io.sys") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="msdos.sys") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="ntuser.dat.log") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="thumbs.db") returned 0x0
	[0111.623] StrStrW (lpFirst="nzcaii.csv", lpSrch="swapfile.sys") returned 0x0
	[0111.623] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nZcAIi.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nzcaii.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.623] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=10593) returned 1
	[0111.623] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.623] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0111.673] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0111.673] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0111.673] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0111.674] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0111.674] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0111.674] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0111.681] GetLastError () returned 0x3e5
	[0111.681] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0111.681] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc34945d0, ftCreationTime.dwHighDateTime=0x1d5d95e, ftLastAccessTime.dwLowDateTime=0x80b8cfb0, ftLastAccessTime.dwHighDateTime=0x1d5d9ae, ftLastWriteTime.dwLowDateTime=0x80b8cfb0, ftLastWriteTime.dwHighDateTime=0x1d5d9ae, nFileSizeHigh=0x0, nFileSizeLow=0x3813, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkjF7CobirRZAfwDqW.wav", cAlternateFileName="PKJF7C~1.WAV")) returned 1
	[0111.681] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0111.681] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0111.681] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0111.681] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.681] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="ntldr") returned 0x0
	[0111.681] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="pagefile.sys") returned 0x0
	[0111.681] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="ntdetect.com") returned 0x0
	[0111.681] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="autoexec.bat") returned 0x0
	[0111.681] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="desktop.ini") returned 0x0
	[0111.681] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="autorun.inf") returned 0x0
	[0111.681] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="ntuser.dat") returned 0x0
	[0111.681] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="iconcache.db") returned 0x0
	[0111.682] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="bootsect.bak") returned 0x0
	[0111.682] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="boot.ini") returned 0x0
	[0111.682] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="bootfont.bin") returned 0x0
	[0111.682] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="config.sys") returned 0x0
	[0111.682] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="io.sys") returned 0x0
	[0111.682] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="msdos.sys") returned 0x0
	[0111.682] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0111.683] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="thumbs.db") returned 0x0
	[0111.683] StrStrW (lpFirst="pkjf7cobirrzafwdqw.wav", lpSrch="swapfile.sys") returned 0x0
	[0111.683] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\pkjF7CobirRZAfwDqW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pkjf7cobirrzafwdqw.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.683] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=14355) returned 1
	[0111.683] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.683] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0111.693] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633088
	[0111.693] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0111.693] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0111.694] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0111.694] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0111.694] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0111.710] GetLastError () returned 0x3e5
	[0111.710] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0111.710] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3c7c40, ftCreationTime.dwHighDateTime=0x1d5da7f, ftLastAccessTime.dwLowDateTime=0x283d12b0, ftLastAccessTime.dwHighDateTime=0x1d5e034, ftLastWriteTime.dwLowDateTime=0x283d12b0, ftLastWriteTime.dwHighDateTime=0x1d5e034, nFileSizeHigh=0x0, nFileSizeLow=0x95dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="qzfxLs8Rn9VY.docx", cAlternateFileName="QZFXLS~1.DOC")) returned 1
	[0111.710] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0111.710] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0111.710] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0111.710] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.710] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="ntldr") returned 0x0
	[0111.710] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="pagefile.sys") returned 0x0
	[0111.710] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="ntdetect.com") returned 0x0
	[0111.710] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="autoexec.bat") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="desktop.ini") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="autorun.inf") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="ntuser.dat") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="iconcache.db") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="bootsect.bak") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="boot.ini") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="bootfont.bin") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="config.sys") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="io.sys") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="msdos.sys") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="ntuser.dat.log") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="thumbs.db") returned 0x0
	[0111.711] StrStrW (lpFirst="qzfxls8rn9vy.docx", lpSrch="swapfile.sys") returned 0x0
	[0111.711] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\qzfxLs8Rn9VY.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qzfxls8rn9vy.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0111.711] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=38365) returned 1
	[0111.711] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.711] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0111.723] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0111.723] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0111.723] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633088) returned 1
	[0111.724] CryptGenRandom (in: hProv=0x633088, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0111.724] CryptReleaseContext (hProv=0x633088, dwFlags=0x0) returned 1
	[0111.724] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0111.726] GetLastError () returned 0x3e5
	[0111.726] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633198 | out: hHeap=0x5f0000) returned 1
	[0111.726] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb470260, ftCreationTime.dwHighDateTime=0x1d5e7f7, ftLastAccessTime.dwLowDateTime=0x81e333f0, ftLastAccessTime.dwHighDateTime=0x1d5e438, ftLastWriteTime.dwLowDateTime=0x81e333f0, ftLastWriteTime.dwHighDateTime=0x1d5e438, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="R8oLJG7HaM", cAlternateFileName="R8OLJG~1")) returned 1
	[0111.726] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0111.726] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0111.726] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0111.727] lstrcmpW (lpString1="..", lpString2="R8oLJG7HaM") returned -1
	[0111.727] lstrcmpW (lpString1=".", lpString2="R8oLJG7HaM") returned -1
	[0111.727] StrStrW (lpFirst="r8oljg7ham", lpSrch="programdata") returned 0x0
	[0111.727] StrStrW (lpFirst="r8oljg7ham", lpSrch="$recycle.bin") returned 0x0
	[0111.727] StrStrW (lpFirst="r8oljg7ham", lpSrch="program files") returned 0x0
	[0111.727] StrStrW (lpFirst="r8oljg7ham", lpSrch="windows") returned 0x0
	[0111.727] StrStrW (lpFirst="r8oljg7ham", lpSrch="all users") returned 0x0
	[0111.727] StrStrW (lpFirst="r8oljg7ham", lpSrch="winnt") returned 0x0
	[0111.727] StrStrW (lpFirst="r8oljg7ham", lpSrch="appdata") returned 0x0
	[0111.727] StrStrW (lpFirst="r8oljg7ham", lpSrch="application data") returned 0x0
	[0111.727] StrStrW (lpFirst="r8oljg7ham", lpSrch="local settings") returned 0x0
	[0111.727] StrStrW (lpFirst="r8oljg7ham", lpSrch="boot") returned 0x0
	[0111.727] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0111.727] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0111.727] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb470260, ftCreationTime.dwHighDateTime=0x1d5e7f7, ftLastAccessTime.dwLowDateTime=0x81e333f0, ftLastAccessTime.dwHighDateTime=0x1d5e438, ftLastWriteTime.dwLowDateTime=0x81e333f0, ftLastWriteTime.dwHighDateTime=0x1d5e438, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea10
	[0111.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0111.728] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0111.728] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0111.728] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0111.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0111.728] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdb470260, ftCreationTime.dwHighDateTime=0x1d5e7f7, ftLastAccessTime.dwLowDateTime=0x81e333f0, ftLastAccessTime.dwHighDateTime=0x1d5e438, ftLastWriteTime.dwLowDateTime=0x81e333f0, ftLastWriteTime.dwHighDateTime=0x1d5e438, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0111.728] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0111.728] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0111.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0111.728] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaedba6a0, ftCreationTime.dwHighDateTime=0x1d5dd15, ftLastAccessTime.dwLowDateTime=0x1a2af7c0, ftLastAccessTime.dwHighDateTime=0x1d5de93, ftLastWriteTime.dwLowDateTime=0x1a2af7c0, ftLastWriteTime.dwHighDateTime=0x1d5de93, nFileSizeHigh=0x0, nFileSizeLow=0x564e, dwReserved0=0x0, dwReserved1=0x0, cFileName="3icwdXHwxyHA4vRA.png", cAlternateFileName="3ICWDX~1.PNG")) returned 1
	[0111.728] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0111.728] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0111.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0111.728] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.728] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="ntldr") returned 0x0
	[0111.728] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="pagefile.sys") returned 0x0
	[0111.728] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="ntdetect.com") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="autoexec.bat") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="desktop.ini") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="autorun.inf") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="ntuser.dat") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="iconcache.db") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="bootsect.bak") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="boot.ini") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="bootfont.bin") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="config.sys") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="io.sys") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="msdos.sys") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="ntuser.dat.log") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="thumbs.db") returned 0x0
	[0111.729] StrStrW (lpFirst="3icwdxhwxyha4vra.png", lpSrch="swapfile.sys") returned 0x0
	[0111.729] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\3icwdXHwxyHA4vRA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\3icwdxhwxyha4vra.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0111.730] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=22094) returned 1
	[0111.730] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0111.730] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4ab0020
	[0111.740] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0111.741] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351dff0
	[0111.741] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633198) returned 1
	[0111.742] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0111.742] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0111.742] ReadFile (in: hFile=0x3c8, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0
	[0111.999] GetLastError () returned 0x3e5
	[0111.999] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0111.999] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa9c9fa0, ftCreationTime.dwHighDateTime=0x1d5e3b3, ftLastAccessTime.dwLowDateTime=0xa41dd600, ftLastAccessTime.dwHighDateTime=0x1d5e3a7, ftLastWriteTime.dwLowDateTime=0xa41dd600, ftLastWriteTime.dwHighDateTime=0x1d5e3a7, nFileSizeHigh=0x0, nFileSizeLow=0xa2f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NmUmUk6u7GgZXZ5BR.gif", cAlternateFileName="NMUMUK~1.GIF")) returned 1
	[0111.999] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0111.999] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0111.999] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0111.999] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0111.999] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="ntldr") returned 0x0
	[0111.999] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="pagefile.sys") returned 0x0
	[0111.999] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="ntdetect.com") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="autoexec.bat") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="desktop.ini") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="autorun.inf") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="ntuser.dat") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="iconcache.db") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="bootsect.bak") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="boot.ini") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="bootfont.bin") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="config.sys") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="io.sys") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="msdos.sys") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="thumbs.db") returned 0x0
	[0112.000] StrStrW (lpFirst="nmumuk6u7ggzxz5br.gif", lpSrch="swapfile.sys") returned 0x0
	[0112.000] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\NmUmUk6u7GgZXZ5BR.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\nmumuk6u7ggzxz5br.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0112.001] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=41714) returned 1
	[0112.001] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0112.001] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0112.012] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0112.012] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0112.012] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633198) returned 1
	[0112.013] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0112.013] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0112.013] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0112.022] GetLastError () returned 0x3e5
	[0112.022] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0112.022] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2573f90, ftCreationTime.dwHighDateTime=0x1d5e493, ftLastAccessTime.dwLowDateTime=0x3d82c3e0, ftLastAccessTime.dwHighDateTime=0x1d5e769, ftLastWriteTime.dwLowDateTime=0x3d82c3e0, ftLastWriteTime.dwHighDateTime=0x1d5e769, nFileSizeHigh=0x0, nFileSizeLow=0x18d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="oOyx5i.mp3", cAlternateFileName="")) returned 1
	[0112.022] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0112.022] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0112.022] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0112.022] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0112.022] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="ntldr") returned 0x0
	[0112.022] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="pagefile.sys") returned 0x0
	[0112.022] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="ntdetect.com") returned 0x0
	[0112.022] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="autoexec.bat") returned 0x0
	[0112.022] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="desktop.ini") returned 0x0
	[0112.023] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="autorun.inf") returned 0x0
	[0112.023] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="ntuser.dat") returned 0x0
	[0112.023] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="iconcache.db") returned 0x0
	[0112.023] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="bootsect.bak") returned 0x0
	[0112.023] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="boot.ini") returned 0x0
	[0112.023] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="bootfont.bin") returned 0x0
	[0112.023] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="config.sys") returned 0x0
	[0112.023] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="io.sys") returned 0x0
	[0112.023] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="msdos.sys") returned 0x0
	[0112.023] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0112.023] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="thumbs.db") returned 0x0
	[0112.023] StrStrW (lpFirst="ooyx5i.mp3", lpSrch="swapfile.sys") returned 0x0
	[0112.023] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\oOyx5i.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\ooyx5i.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0112.023] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=101707) returned 1
	[0112.024] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0112.024] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0112.036] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0112.036] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0112.036] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0112.037] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0112.037] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0112.037] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0112.071] GetLastError () returned 0x3e5
	[0112.071] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0112.071] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a852c0, ftCreationTime.dwHighDateTime=0x1d5dd7e, ftLastAccessTime.dwLowDateTime=0x1fb726d0, ftLastAccessTime.dwHighDateTime=0x1d5e81d, ftLastWriteTime.dwLowDateTime=0x1fb726d0, ftLastWriteTime.dwHighDateTime=0x1d5e81d, nFileSizeHigh=0x0, nFileSizeLow=0x5d6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y6LkUcJgbr VRLA.wav", cAlternateFileName="Y6LKUC~1.WAV")) returned 1
	[0112.071] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0112.071] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0112.072] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="ntldr") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="pagefile.sys") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="ntdetect.com") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="autoexec.bat") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="desktop.ini") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="autorun.inf") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="ntuser.dat") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="iconcache.db") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="bootsect.bak") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="boot.ini") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="bootfont.bin") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="config.sys") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="io.sys") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="msdos.sys") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="thumbs.db") returned 0x0
	[0112.072] StrStrW (lpFirst="y6lkucjgbr vrla.wav", lpSrch="swapfile.sys") returned 0x0
	[0112.072] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\Y6LkUcJgbr VRLA.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\y6lkucjgbr vrla.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0112.073] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=23914) returned 1
	[0112.073] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0112.073] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0112.084] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0112.084] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0112.084] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0112.085] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0112.085] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0112.085] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0112.107] GetLastError () returned 0x3e5
	[0112.107] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0112.107] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd745d1d0, ftCreationTime.dwHighDateTime=0x1d5e06a, ftLastAccessTime.dwLowDateTime=0xef1cc780, ftLastAccessTime.dwHighDateTime=0x1d5dbb2, ftLastWriteTime.dwLowDateTime=0xef1cc780, ftLastWriteTime.dwHighDateTime=0x1d5dbb2, nFileSizeHigh=0x0, nFileSizeLow=0x4618, dwReserved0=0x0, dwReserved1=0x0, cFileName="yFncPMRrFQiCgwK VnlZ.bmp", cAlternateFileName="YFNCPM~1.BMP")) returned 1
	[0112.107] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0112.107] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0112.107] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="ntldr") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="pagefile.sys") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="ntdetect.com") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="autoexec.bat") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="desktop.ini") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="autorun.inf") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="ntuser.dat") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="iconcache.db") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="bootsect.bak") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="boot.ini") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="bootfont.bin") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="config.sys") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="io.sys") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="msdos.sys") returned 0x0
	[0112.107] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0112.108] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="thumbs.db") returned 0x0
	[0112.108] StrStrW (lpFirst="yfncpmrrfqicgwk vnlz.bmp", lpSrch="swapfile.sys") returned 0x0
	[0112.108] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\yFncPMRrFQiCgwK VnlZ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\yfncpmrrfqicgwk vnlz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0112.108] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=17944) returned 1
	[0112.108] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0112.108] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0112.119] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0112.119] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0112.119] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0112.120] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0112.120] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0112.120] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0112.129] GetLastError () returned 0x3e5
	[0112.129] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0112.129] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eec2b40, ftCreationTime.dwHighDateTime=0x1d5d88a, ftLastAccessTime.dwLowDateTime=0x62cf6dc0, ftLastAccessTime.dwHighDateTime=0x1d5d92b, ftLastWriteTime.dwLowDateTime=0x62cf6dc0, ftLastWriteTime.dwHighDateTime=0x1d5d92b, nFileSizeHigh=0x0, nFileSizeLow=0x175a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="zsK7Tyj6OFZO2w.jpg", cAlternateFileName="ZSK7TY~1.JPG")) returned 1
	[0112.129] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0112.129] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0112.129] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0112.129] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0112.129] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="ntldr") returned 0x0
	[0112.129] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="pagefile.sys") returned 0x0
	[0112.129] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="ntdetect.com") returned 0x0
	[0112.129] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="autoexec.bat") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="desktop.ini") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="autorun.inf") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="ntuser.dat") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="iconcache.db") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="bootsect.bak") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="boot.ini") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="bootfont.bin") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="config.sys") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="io.sys") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="msdos.sys") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="thumbs.db") returned 0x0
	[0112.130] StrStrW (lpFirst="zsk7tyj6ofzo2w.jpg", lpSrch="swapfile.sys") returned 0x0
	[0112.130] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\zsK7Tyj6OFZO2w.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\zsk7tyj6ofzo2w.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0112.130] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=95654) returned 1
	[0112.130] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0112.130] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0112.142] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0112.142] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0112.142] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0112.143] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0112.143] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0112.144] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0112.162] GetLastError () returned 0x3e5
	[0112.162] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0112.162] FindNextFileW (in: hFindFile=0x61ea10, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eec2b40, ftCreationTime.dwHighDateTime=0x1d5d88a, ftLastAccessTime.dwLowDateTime=0x62cf6dc0, ftLastAccessTime.dwHighDateTime=0x1d5d92b, ftLastWriteTime.dwLowDateTime=0x62cf6dc0, ftLastWriteTime.dwHighDateTime=0x1d5d92b, nFileSizeHigh=0x0, nFileSizeLow=0x175a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="zsk7tyj6ofzo2w.jpg", cAlternateFileName="ZSK7TY~1.JPG")) returned 0
	[0112.162] FindClose (in: hFindFile=0x61ea10 | out: hFindFile=0x61ea10) returned 1
	[0112.162] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0112.162] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0112.162] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0112.162] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0112.162] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\R8oLJG7HaM\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\r8oljg7ham\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3a8
	[0112.163] WriteFile (in: hFile=0x3a8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0112.164] CloseHandle (hObject=0x3a8) returned 1
	[0112.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0112.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0112.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0112.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0112.164] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c1a4f0, ftCreationTime.dwHighDateTime=0x1d5dfd4, ftLastAccessTime.dwLowDateTime=0x66f7b8e0, ftLastAccessTime.dwHighDateTime=0x1d5e32a, ftLastWriteTime.dwLowDateTime=0x66f7b8e0, ftLastWriteTime.dwHighDateTime=0x1d5e32a, nFileSizeHigh=0x0, nFileSizeLow=0x139cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="rFlbShIKO6.xlsx", cAlternateFileName="RFLBSH~1.XLS")) returned 1
	[0112.164] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0112.164] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0112.165] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="ntldr") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="pagefile.sys") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="ntdetect.com") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="autoexec.bat") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="desktop.ini") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="autorun.inf") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="ntuser.dat") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="iconcache.db") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="bootsect.bak") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="boot.ini") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="bootfont.bin") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="config.sys") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="io.sys") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="msdos.sys") returned 0x0
	[0112.165] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="ntuser.dat.log") returned 0x0
	[0112.166] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="thumbs.db") returned 0x0
	[0112.166] StrStrW (lpFirst="rflbshiko6.xlsx", lpSrch="swapfile.sys") returned 0x0
	[0112.166] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\rFlbShIKO6.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rflbshiko6.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3a8
	[0112.166] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=80332) returned 1
	[0112.166] CreateIoCompletionPort (FileHandle=0x3a8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0112.166] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0112.178] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0112.178] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x40819f8
	[0112.178] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0112.179] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0112.179] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0112.179] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0112.236] GetLastError () returned 0x3e5
	[0112.237] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0112.237] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64086a10, ftCreationTime.dwHighDateTime=0x1d5e11a, ftLastAccessTime.dwLowDateTime=0x7910c90, ftLastAccessTime.dwHighDateTime=0x1d5e199, ftLastWriteTime.dwLowDateTime=0x7910c90, ftLastWriteTime.dwHighDateTime=0x1d5e199, nFileSizeHigh=0x0, nFileSizeLow=0x9b09, dwReserved0=0x0, dwReserved1=0x0, cFileName="RYKGI7S1qw5nsZ9RGHHZ.png", cAlternateFileName="RYKGI7~1.PNG")) returned 1
	[0112.237] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0112.237] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0112.237] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0112.237] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0112.237] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="ntldr") returned 0x0
	[0112.237] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="pagefile.sys") returned 0x0
	[0112.237] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="ntdetect.com") returned 0x0
	[0112.237] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="autoexec.bat") returned 0x0
	[0112.237] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="desktop.ini") returned 0x0
	[0112.237] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="autorun.inf") returned 0x0
	[0112.237] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="ntuser.dat") returned 0x0
	[0112.237] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="iconcache.db") returned 0x0
	[0112.237] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="bootsect.bak") returned 0x0
	[0112.237] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="boot.ini") returned 0x0
	[0112.238] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="bootfont.bin") returned 0x0
	[0112.238] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="config.sys") returned 0x0
	[0112.238] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="io.sys") returned 0x0
	[0112.238] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="msdos.sys") returned 0x0
	[0112.238] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="ntuser.dat.log") returned 0x0
	[0112.238] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="thumbs.db") returned 0x0
	[0112.238] StrStrW (lpFirst="rykgi7s1qw5nsz9rghhz.png", lpSrch="swapfile.sys") returned 0x0
	[0112.238] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RYKGI7S1qw5nsZ9RGHHZ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rykgi7s1qw5nsz9rghhz.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3a8
	[0112.238] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=39689) returned 1
	[0112.238] CreateIoCompletionPort (FileHandle=0x3a8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0112.238] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0112.261] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0112.261] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x40819f8
	[0112.261] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633088) returned 1
	[0112.262] CryptGenRandom (in: hProv=0x633088, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0112.262] CryptReleaseContext (hProv=0x633088, dwFlags=0x0) returned 1
	[0112.263] ReadFile (in: hFile=0x3a8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0112.270] GetLastError () returned 0x3e5
	[0112.270] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0112.270] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x374a1970, ftCreationTime.dwHighDateTime=0x1d5e538, ftLastAccessTime.dwLowDateTime=0xbd909bd0, ftLastAccessTime.dwHighDateTime=0x1d5e128, ftLastWriteTime.dwLowDateTime=0xbd909bd0, ftLastWriteTime.dwHighDateTime=0x1d5e128, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="SptlLDw47WFBL.bmp", cAlternateFileName="SPTLLD~1.BMP")) returned 1
	[0112.270] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0112.270] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0112.270] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="ntldr") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="pagefile.sys") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="ntdetect.com") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="autoexec.bat") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="desktop.ini") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="autorun.inf") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="ntuser.dat") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="iconcache.db") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="bootsect.bak") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="boot.ini") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="bootfont.bin") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="config.sys") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="io.sys") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="msdos.sys") returned 0x0
	[0112.271] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0112.272] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="thumbs.db") returned 0x0
	[0112.272] StrStrW (lpFirst="sptlldw47wfbl.bmp", lpSrch="swapfile.sys") returned 0x0
	[0112.272] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SptlLDw47WFBL.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sptlldw47wfbl.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0112.272] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=14132) returned 1
	[0112.272] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0112.272] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0112.287] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633088
	[0112.287] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cad8
	[0112.287] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0112.288] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0112.288] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0112.288] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0112.289] GetLastError () returned 0x3e5
	[0112.289] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0112.289] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e64a300, ftCreationTime.dwHighDateTime=0x1d6bd30, ftLastAccessTime.dwLowDateTime=0x1e64a300, ftLastAccessTime.dwHighDateTime=0x1d6bd30, ftLastWriteTime.dwLowDateTime=0xd9d80800, ftLastWriteTime.dwHighDateTime=0x1d6bd2d, nFileSizeHigh=0x0, nFileSizeLow=0x2cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sVSwdhWJRXFZUXuI.exe", cAlternateFileName="SVSWDH~1.EXE")) returned 1
	[0112.289] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0112.289] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0112.289] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0112.289] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="ntldr") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="pagefile.sys") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="ntdetect.com") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="autoexec.bat") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="desktop.ini") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="autorun.inf") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="ntuser.dat") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="iconcache.db") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="bootsect.bak") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="boot.ini") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="bootfont.bin") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="config.sys") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="io.sys") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="msdos.sys") returned 0x0
	[0112.290] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="ntuser.dat.log") returned 0x0
	[0112.291] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="thumbs.db") returned 0x0
	[0112.291] StrStrW (lpFirst="svswdhwjrxfzuxui.exe", lpSrch="swapfile.sys") returned 0x0
	[0112.291] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sVSwdhWJRXFZUXuI.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\svswdhwjrxfzuxui.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0xffffffff
	[0112.291] RmStartSession () returned 0x0
	[0112.293] RmRegisterResources () returned 0x0
	[0112.297] RmGetList () returned 0xea
	[0113.387] RmShutdown () returned 0x15e
	[0113.448] RmEndSession () returned 0x0
	[0113.451] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sVSwdhWJRXFZUXuI.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\svswdhwjrxfzuxui.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0xffffffff
	[0113.451] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0113.451] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6300aa0, ftCreationTime.dwHighDateTime=0x1d5e12a, ftLastAccessTime.dwLowDateTime=0xb5060ba0, ftLastAccessTime.dwHighDateTime=0x1d5de06, ftLastWriteTime.dwLowDateTime=0xb5060ba0, ftLastWriteTime.dwHighDateTime=0x1d5de06, nFileSizeHigh=0x0, nFileSizeLow=0x141f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SZ wLbnmZnssv.png", cAlternateFileName="SZWLBN~1.PNG")) returned 1
	[0113.451] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0113.452] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0113.452] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0113.452] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0113.452] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="ntldr") returned 0x0
	[0113.452] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="pagefile.sys") returned 0x0
	[0113.452] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="ntdetect.com") returned 0x0
	[0113.452] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="autoexec.bat") returned 0x0
	[0113.452] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="desktop.ini") returned 0x0
	[0113.452] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="autorun.inf") returned 0x0
	[0113.452] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="ntuser.dat") returned 0x0
	[0113.452] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="iconcache.db") returned 0x0
	[0113.452] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="bootsect.bak") returned 0x0
	[0113.453] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="boot.ini") returned 0x0
	[0113.453] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="bootfont.bin") returned 0x0
	[0113.453] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="config.sys") returned 0x0
	[0113.453] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="io.sys") returned 0x0
	[0113.453] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="msdos.sys") returned 0x0
	[0113.453] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="ntuser.dat.log") returned 0x0
	[0113.453] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="thumbs.db") returned 0x0
	[0113.453] StrStrW (lpFirst="sz wlbnmznssv.png", lpSrch="swapfile.sys") returned 0x0
	[0113.453] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SZ wLbnmZnssv.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sz wlbnmznssv.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0113.453] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=82418) returned 1
	[0113.453] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0113.453] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0113.466] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0113.466] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3522790
	[0113.466] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0113.467] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0113.467] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0113.467] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0113.469] GetLastError () returned 0x3e5
	[0113.469] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0113.469] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1606b0, ftCreationTime.dwHighDateTime=0x1d5dc3e, ftLastAccessTime.dwLowDateTime=0x57cba540, ftLastAccessTime.dwHighDateTime=0x1d5ded2, ftLastWriteTime.dwLowDateTime=0x57cba540, ftLastWriteTime.dwHighDateTime=0x1d5ded2, nFileSizeHigh=0x0, nFileSizeLow=0x6df, dwReserved0=0x0, dwReserved1=0x0, cFileName="UDWu JchmovkMW.mp3", cAlternateFileName="UDWUJC~1.MP3")) returned 1
	[0113.470] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0113.470] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0113.470] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0113.470] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0113.470] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="ntldr") returned 0x0
	[0113.470] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="pagefile.sys") returned 0x0
	[0113.470] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="ntdetect.com") returned 0x0
	[0113.470] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="autoexec.bat") returned 0x0
	[0113.470] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="desktop.ini") returned 0x0
	[0113.470] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="autorun.inf") returned 0x0
	[0113.470] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="ntuser.dat") returned 0x0
	[0113.470] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="iconcache.db") returned 0x0
	[0113.470] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="bootsect.bak") returned 0x0
	[0113.470] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="boot.ini") returned 0x0
	[0113.471] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="bootfont.bin") returned 0x0
	[0113.471] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="config.sys") returned 0x0
	[0113.471] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="io.sys") returned 0x0
	[0113.471] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="msdos.sys") returned 0x0
	[0113.471] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0113.471] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="thumbs.db") returned 0x0
	[0113.471] StrStrW (lpFirst="udwu jchmovkmw.mp3", lpSrch="swapfile.sys") returned 0x0
	[0113.471] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\UDWu JchmovkMW.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\udwu jchmovkmw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0113.471] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=1759) returned 1
	[0113.471] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0113.471] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0113.485] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0113.485] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3521c18
	[0113.485] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x632f78) returned 1
	[0113.486] CryptGenRandom (in: hProv=0x632f78, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0113.486] CryptReleaseContext (hProv=0x632f78, dwFlags=0x0) returned 1
	[0113.486] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0113.507] GetLastError () returned 0x3e5
	[0113.507] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0113.507] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9fdd440, ftCreationTime.dwHighDateTime=0x1d5dda9, ftLastAccessTime.dwLowDateTime=0x85b7f760, ftLastAccessTime.dwHighDateTime=0x1d5e661, ftLastWriteTime.dwLowDateTime=0x85b7f760, ftLastWriteTime.dwHighDateTime=0x1d5e661, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wDmQnqmqed3", cAlternateFileName="WDMQNQ~1")) returned 1
	[0113.507] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0113.507] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0113.507] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0113.507] lstrcmpW (lpString1="..", lpString2="wDmQnqmqed3") returned -1
	[0113.507] lstrcmpW (lpString1=".", lpString2="wDmQnqmqed3") returned -1
	[0113.507] StrStrW (lpFirst="wdmqnqmqed3", lpSrch="programdata") returned 0x0
	[0113.507] StrStrW (lpFirst="wdmqnqmqed3", lpSrch="$recycle.bin") returned 0x0
	[0113.507] StrStrW (lpFirst="wdmqnqmqed3", lpSrch="program files") returned 0x0
	[0113.507] StrStrW (lpFirst="wdmqnqmqed3", lpSrch="windows") returned 0x0
	[0113.508] StrStrW (lpFirst="wdmqnqmqed3", lpSrch="all users") returned 0x0
	[0113.508] StrStrW (lpFirst="wdmqnqmqed3", lpSrch="winnt") returned 0x0
	[0113.508] StrStrW (lpFirst="wdmqnqmqed3", lpSrch="appdata") returned 0x0
	[0113.508] StrStrW (lpFirst="wdmqnqmqed3", lpSrch="application data") returned 0x0
	[0113.508] StrStrW (lpFirst="wdmqnqmqed3", lpSrch="local settings") returned 0x0
	[0113.508] StrStrW (lpFirst="wdmqnqmqed3", lpSrch="boot") returned 0x0
	[0113.508] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0113.508] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0113.508] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wDmQnqmqed3\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9fdd440, ftCreationTime.dwHighDateTime=0x1d5dda9, ftLastAccessTime.dwLowDateTime=0x85b7f760, ftLastAccessTime.dwHighDateTime=0x1d5e661, ftLastWriteTime.dwLowDateTime=0x85b7f760, ftLastWriteTime.dwHighDateTime=0x1d5e661, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ead0
	[0113.508] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0113.508] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0113.508] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0113.508] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0113.508] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0113.508] FindNextFileW (in: hFindFile=0x61ead0, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9fdd440, ftCreationTime.dwHighDateTime=0x1d5dda9, ftLastAccessTime.dwLowDateTime=0x85b7f760, ftLastAccessTime.dwHighDateTime=0x1d5e661, ftLastWriteTime.dwLowDateTime=0x85b7f760, ftLastWriteTime.dwHighDateTime=0x1d5e661, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0113.509] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0113.509] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0113.509] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0113.509] FindNextFileW (in: hFindFile=0x61ead0, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x291c8370, ftCreationTime.dwHighDateTime=0x1d5e659, ftLastAccessTime.dwLowDateTime=0x95b59ff0, ftLastAccessTime.dwHighDateTime=0x1d5dc20, ftLastWriteTime.dwLowDateTime=0x95b59ff0, ftLastWriteTime.dwHighDateTime=0x1d5dc20, nFileSizeHigh=0x0, nFileSizeLow=0x51ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="hJ-pTKrnE.wav", cAlternateFileName="HJ-PTK~1.WAV")) returned 1
	[0113.509] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0113.509] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0113.509] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0113.509] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0113.509] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="ntldr") returned 0x0
	[0113.509] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="pagefile.sys") returned 0x0
	[0113.509] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="ntdetect.com") returned 0x0
	[0113.509] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="autoexec.bat") returned 0x0
	[0113.509] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="desktop.ini") returned 0x0
	[0113.509] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="autorun.inf") returned 0x0
	[0113.509] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="ntuser.dat") returned 0x0
	[0113.509] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="iconcache.db") returned 0x0
	[0113.509] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="bootsect.bak") returned 0x0
	[0113.509] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="boot.ini") returned 0x0
	[0113.509] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="bootfont.bin") returned 0x0
	[0113.510] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="config.sys") returned 0x0
	[0113.510] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="io.sys") returned 0x0
	[0113.510] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="msdos.sys") returned 0x0
	[0113.510] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0113.510] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="thumbs.db") returned 0x0
	[0113.510] StrStrW (lpFirst="hj-ptkrne.wav", lpSrch="swapfile.sys") returned 0x0
	[0113.510] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wDmQnqmqed3\\hJ-pTKrnE.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wdmqnqmqed3\\hj-ptkrne.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0113.510] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=20909) returned 1
	[0113.510] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0113.510] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0113.726] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0113.726] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3522790
	[0113.726] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0113.729] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0113.729] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0113.729] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0113.740] GetLastError () returned 0x3e5
	[0113.740] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0113.740] FindNextFileW (in: hFindFile=0x61ead0, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a59980, ftCreationTime.dwHighDateTime=0x1d5d8d3, ftLastAccessTime.dwLowDateTime=0x85dcf50, ftLastAccessTime.dwHighDateTime=0x1d5e5b3, ftLastWriteTime.dwLowDateTime=0x85dcf50, ftLastWriteTime.dwHighDateTime=0x1d5e5b3, nFileSizeHigh=0x0, nFileSizeLow=0xbf7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="pAvEBY4.flv", cAlternateFileName="")) returned 1
	[0113.741] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0113.741] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0113.741] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0113.741] StrStrW (lpFirst="paveby4.flv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0113.741] StrStrW (lpFirst="paveby4.flv", lpSrch="ntldr") returned 0x0
	[0113.741] StrStrW (lpFirst="paveby4.flv", lpSrch="pagefile.sys") returned 0x0
	[0113.741] StrStrW (lpFirst="paveby4.flv", lpSrch="ntdetect.com") returned 0x0
	[0113.741] StrStrW (lpFirst="paveby4.flv", lpSrch="autoexec.bat") returned 0x0
	[0113.741] StrStrW (lpFirst="paveby4.flv", lpSrch="desktop.ini") returned 0x0
	[0113.741] StrStrW (lpFirst="paveby4.flv", lpSrch="autorun.inf") returned 0x0
	[0113.742] StrStrW (lpFirst="paveby4.flv", lpSrch="ntuser.dat") returned 0x0
	[0113.742] StrStrW (lpFirst="paveby4.flv", lpSrch="iconcache.db") returned 0x0
	[0113.742] StrStrW (lpFirst="paveby4.flv", lpSrch="bootsect.bak") returned 0x0
	[0113.742] StrStrW (lpFirst="paveby4.flv", lpSrch="boot.ini") returned 0x0
	[0113.742] StrStrW (lpFirst="paveby4.flv", lpSrch="bootfont.bin") returned 0x0
	[0113.742] StrStrW (lpFirst="paveby4.flv", lpSrch="config.sys") returned 0x0
	[0113.742] StrStrW (lpFirst="paveby4.flv", lpSrch="io.sys") returned 0x0
	[0113.742] StrStrW (lpFirst="paveby4.flv", lpSrch="msdos.sys") returned 0x0
	[0113.742] StrStrW (lpFirst="paveby4.flv", lpSrch="ntuser.dat.log") returned 0x0
	[0113.742] StrStrW (lpFirst="paveby4.flv", lpSrch="thumbs.db") returned 0x0
	[0113.742] StrStrW (lpFirst="paveby4.flv", lpSrch="swapfile.sys") returned 0x0
	[0113.743] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wDmQnqmqed3\\pAvEBY4.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wdmqnqmqed3\\paveby4.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0113.743] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=49023) returned 1
	[0113.743] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0113.743] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0113.757] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0113.757] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3522790
	[0113.757] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0113.758] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0113.758] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0113.758] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0113.766] GetLastError () returned 0x3e5
	[0113.766] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0113.766] FindNextFileW (in: hFindFile=0x61ead0, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7a59980, ftCreationTime.dwHighDateTime=0x1d5d8d3, ftLastAccessTime.dwLowDateTime=0x85dcf50, ftLastAccessTime.dwHighDateTime=0x1d5e5b3, ftLastWriteTime.dwLowDateTime=0x85dcf50, ftLastWriteTime.dwHighDateTime=0x1d5e5b3, nFileSizeHigh=0x0, nFileSizeLow=0xbf7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="paveby4.flv", cAlternateFileName="")) returned 0
	[0113.766] FindClose (in: hFindFile=0x61ead0 | out: hFindFile=0x61ead0) returned 1
	[0113.767] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0113.767] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0113.767] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0113.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0113.767] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wDmQnqmqed3\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wdmqnqmqed3\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c4
	[0113.769] WriteFile (in: hFile=0x3c4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0113.770] CloseHandle (hObject=0x3c4) returned 1
	[0113.771] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0113.771] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0113.771] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0113.771] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0113.771] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de52d40, ftCreationTime.dwHighDateTime=0x1d5e2c3, ftLastAccessTime.dwLowDateTime=0x2efa2d10, ftLastAccessTime.dwHighDateTime=0x1d5defc, ftLastWriteTime.dwLowDateTime=0x2efa2d10, ftLastWriteTime.dwHighDateTime=0x1d5defc, nFileSizeHigh=0x0, nFileSizeLow=0x47b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wf3_D.gif", cAlternateFileName="")) returned 1
	[0113.771] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0113.771] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0113.771] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0113.771] StrStrW (lpFirst="wf3_d.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0113.771] StrStrW (lpFirst="wf3_d.gif", lpSrch="ntldr") returned 0x0
	[0113.771] StrStrW (lpFirst="wf3_d.gif", lpSrch="pagefile.sys") returned 0x0
	[0113.771] StrStrW (lpFirst="wf3_d.gif", lpSrch="ntdetect.com") returned 0x0
	[0113.771] StrStrW (lpFirst="wf3_d.gif", lpSrch="autoexec.bat") returned 0x0
	[0113.771] StrStrW (lpFirst="wf3_d.gif", lpSrch="desktop.ini") returned 0x0
	[0113.771] StrStrW (lpFirst="wf3_d.gif", lpSrch="autorun.inf") returned 0x0
	[0113.771] StrStrW (lpFirst="wf3_d.gif", lpSrch="ntuser.dat") returned 0x0
	[0113.771] StrStrW (lpFirst="wf3_d.gif", lpSrch="iconcache.db") returned 0x0
	[0113.772] StrStrW (lpFirst="wf3_d.gif", lpSrch="bootsect.bak") returned 0x0
	[0113.772] StrStrW (lpFirst="wf3_d.gif", lpSrch="boot.ini") returned 0x0
	[0113.772] StrStrW (lpFirst="wf3_d.gif", lpSrch="bootfont.bin") returned 0x0
	[0113.772] StrStrW (lpFirst="wf3_d.gif", lpSrch="config.sys") returned 0x0
	[0113.772] StrStrW (lpFirst="wf3_d.gif", lpSrch="io.sys") returned 0x0
	[0113.772] StrStrW (lpFirst="wf3_d.gif", lpSrch="msdos.sys") returned 0x0
	[0113.772] StrStrW (lpFirst="wf3_d.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0113.772] StrStrW (lpFirst="wf3_d.gif", lpSrch="thumbs.db") returned 0x0
	[0113.773] StrStrW (lpFirst="wf3_d.gif", lpSrch="swapfile.sys") returned 0x0
	[0113.773] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wf3_D.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wf3_d.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0113.773] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=18360) returned 1
	[0113.773] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0113.773] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0113.785] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0113.785] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3522790
	[0113.785] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0113.786] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0113.786] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0113.786] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0113.787] GetLastError () returned 0x3e5
	[0113.787] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0113.788] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e030230, ftCreationTime.dwHighDateTime=0x1d5d826, ftLastAccessTime.dwLowDateTime=0x9d1beff0, ftLastAccessTime.dwHighDateTime=0x1d5de88, ftLastWriteTime.dwLowDateTime=0x9d1beff0, ftLastWriteTime.dwHighDateTime=0x1d5de88, nFileSizeHigh=0x0, nFileSizeLow=0xeb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="XAMO.mp3", cAlternateFileName="")) returned 1
	[0113.788] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0113.788] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0113.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0113.788] StrStrW (lpFirst="xamo.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0113.788] StrStrW (lpFirst="xamo.mp3", lpSrch="ntldr") returned 0x0
	[0113.788] StrStrW (lpFirst="xamo.mp3", lpSrch="pagefile.sys") returned 0x0
	[0113.788] StrStrW (lpFirst="xamo.mp3", lpSrch="ntdetect.com") returned 0x0
	[0113.788] StrStrW (lpFirst="xamo.mp3", lpSrch="autoexec.bat") returned 0x0
	[0113.788] StrStrW (lpFirst="xamo.mp3", lpSrch="desktop.ini") returned 0x0
	[0113.788] StrStrW (lpFirst="xamo.mp3", lpSrch="autorun.inf") returned 0x0
	[0113.788] StrStrW (lpFirst="xamo.mp3", lpSrch="ntuser.dat") returned 0x0
	[0113.788] StrStrW (lpFirst="xamo.mp3", lpSrch="iconcache.db") returned 0x0
	[0113.788] StrStrW (lpFirst="xamo.mp3", lpSrch="bootsect.bak") returned 0x0
	[0113.788] StrStrW (lpFirst="xamo.mp3", lpSrch="boot.ini") returned 0x0
	[0113.788] StrStrW (lpFirst="xamo.mp3", lpSrch="bootfont.bin") returned 0x0
	[0113.789] StrStrW (lpFirst="xamo.mp3", lpSrch="config.sys") returned 0x0
	[0113.789] StrStrW (lpFirst="xamo.mp3", lpSrch="io.sys") returned 0x0
	[0113.789] StrStrW (lpFirst="xamo.mp3", lpSrch="msdos.sys") returned 0x0
	[0113.789] StrStrW (lpFirst="xamo.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0113.789] StrStrW (lpFirst="xamo.mp3", lpSrch="thumbs.db") returned 0x0
	[0113.789] StrStrW (lpFirst="xamo.mp3", lpSrch="swapfile.sys") returned 0x0
	[0113.789] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XAMO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xamo.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0113.789] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=60232) returned 1
	[0113.789] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0113.789] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0113.803] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0113.803] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3521c18
	[0113.803] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0113.805] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0113.805] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0113.805] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0113.815] GetLastError () returned 0x3e5
	[0113.815] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0113.815] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99dcd1f0, ftCreationTime.dwHighDateTime=0x1d5db50, ftLastAccessTime.dwLowDateTime=0xa74c7430, ftLastAccessTime.dwHighDateTime=0x1d5e2f8, ftLastWriteTime.dwLowDateTime=0xa74c7430, ftLastWriteTime.dwHighDateTime=0x1d5e2f8, nFileSizeHigh=0x0, nFileSizeLow=0x78c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xn4YV2mMv8OQOTNNOu.doc", cAlternateFileName="XN4YV2~1.DOC")) returned 1
	[0113.815] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0113.815] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0113.815] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0113.815] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0113.815] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="ntldr") returned 0x0
	[0113.815] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="pagefile.sys") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="ntdetect.com") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="autoexec.bat") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="desktop.ini") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="autorun.inf") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="ntuser.dat") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="iconcache.db") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="bootsect.bak") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="boot.ini") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="bootfont.bin") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="config.sys") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="io.sys") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="msdos.sys") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="ntuser.dat.log") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="thumbs.db") returned 0x0
	[0113.816] StrStrW (lpFirst="xn4yv2mmv8oqotnnou.doc", lpSrch="swapfile.sys") returned 0x0
	[0113.816] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xn4YV2mMv8OQOTNNOu.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xn4yv2mmv8oqotnnou.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0113.817] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=30913) returned 1
	[0113.817] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0113.817] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0113.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0113.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3521c18
	[0113.843] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x632f78) returned 1
	[0113.845] CryptGenRandom (in: hProv=0x632f78, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0113.845] CryptReleaseContext (hProv=0x632f78, dwFlags=0x0) returned 1
	[0113.845] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0113.859] GetLastError () returned 0x3e5
	[0113.859] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0113.859] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22e442f0, ftCreationTime.dwHighDateTime=0x1d5e7b1, ftLastAccessTime.dwLowDateTime=0xc9299950, ftLastAccessTime.dwHighDateTime=0x1d5e70f, ftLastWriteTime.dwLowDateTime=0xc9299950, ftLastWriteTime.dwHighDateTime=0x1d5e70f, nFileSizeHigh=0x0, nFileSizeLow=0xb29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YOibxDGO83L0-bQimYPS.png", cAlternateFileName="YOIBXD~1.PNG")) returned 1
	[0113.859] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0113.859] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0113.859] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0113.859] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0113.859] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="ntldr") returned 0x0
	[0113.859] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="pagefile.sys") returned 0x0
	[0113.859] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="ntdetect.com") returned 0x0
	[0113.859] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="autoexec.bat") returned 0x0
	[0113.859] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="desktop.ini") returned 0x0
	[0113.859] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="autorun.inf") returned 0x0
	[0113.860] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="ntuser.dat") returned 0x0
	[0113.860] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="iconcache.db") returned 0x0
	[0113.860] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="bootsect.bak") returned 0x0
	[0113.860] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="boot.ini") returned 0x0
	[0113.860] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="bootfont.bin") returned 0x0
	[0113.860] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="config.sys") returned 0x0
	[0113.860] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="io.sys") returned 0x0
	[0113.860] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="msdos.sys") returned 0x0
	[0113.860] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="ntuser.dat.log") returned 0x0
	[0113.860] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="thumbs.db") returned 0x0
	[0113.860] StrStrW (lpFirst="yoibxdgo83l0-bqimyps.png", lpSrch="swapfile.sys") returned 0x0
	[0113.860] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YOibxDGO83L0-bQimYPS.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yoibxdgo83l0-bqimyps.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0113.860] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=45724) returned 1
	[0113.861] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0113.861] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0113.875] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x632f78
	[0113.875] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3521c18
	[0113.875] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0113.876] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0113.876] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0113.876] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0113.899] GetLastError () returned 0x3e5
	[0113.899] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0113.899] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x254068b0, ftCreationTime.dwHighDateTime=0x1d5e5bf, ftLastAccessTime.dwLowDateTime=0x4bc4fa90, ftLastAccessTime.dwHighDateTime=0x1d5e07a, ftLastWriteTime.dwLowDateTime=0x4bc4fa90, ftLastWriteTime.dwHighDateTime=0x1d5e07a, nFileSizeHigh=0x0, nFileSizeLow=0xf98e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_sq_ e5DTD.swf", cAlternateFileName="_SQ_E5~1.SWF")) returned 1
	[0113.899] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0113.899] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0113.899] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0113.899] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0113.899] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="ntldr") returned 0x0
	[0113.899] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="pagefile.sys") returned 0x0
	[0113.899] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="ntdetect.com") returned 0x0
	[0113.899] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="autoexec.bat") returned 0x0
	[0113.899] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="desktop.ini") returned 0x0
	[0113.900] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="autorun.inf") returned 0x0
	[0113.900] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="ntuser.dat") returned 0x0
	[0113.900] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="iconcache.db") returned 0x0
	[0113.900] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="bootsect.bak") returned 0x0
	[0113.900] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="boot.ini") returned 0x0
	[0113.900] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="bootfont.bin") returned 0x0
	[0113.900] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="config.sys") returned 0x0
	[0113.900] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="io.sys") returned 0x0
	[0113.900] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="msdos.sys") returned 0x0
	[0113.900] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="ntuser.dat.log") returned 0x0
	[0113.900] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="thumbs.db") returned 0x0
	[0113.900] StrStrW (lpFirst="_sq_ e5dtd.swf", lpSrch="swapfile.sys") returned 0x0
	[0113.900] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_sq_ e5DTD.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_sq_ e5dtd.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0113.900] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=63886) returned 1
	[0113.900] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0113.901] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0113.913] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0113.913] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3522790
	[0113.913] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0113.914] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0113.914] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0113.914] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0113.915] GetLastError () returned 0x3e5
	[0113.915] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0113.915] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x254068b0, ftCreationTime.dwHighDateTime=0x1d5e5bf, ftLastAccessTime.dwLowDateTime=0x4bc4fa90, ftLastAccessTime.dwHighDateTime=0x1d5e07a, ftLastWriteTime.dwLowDateTime=0x4bc4fa90, ftLastWriteTime.dwHighDateTime=0x1d5e07a, nFileSizeHigh=0x0, nFileSizeLow=0xf98e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_sq_ e5dtd.swf", cAlternateFileName="_SQ_E5~1.SWF")) returned 0
	[0113.915] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0113.915] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0113.916] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0113.916] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0113.916] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0113.916] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0113.916] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0113.918] CloseHandle (hObject=0x3bc) returned 1
	[0113.918] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0113.918] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0113.918] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0113.918] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0113.918] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc14d180, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc14d180, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0113.918] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665800
	[0113.918] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0113.918] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665800 | out: hHeap=0x5f0000) returned 1
	[0113.918] lstrcmpW (lpString1="..", lpString2="Documents") returned -1
	[0113.918] lstrcmpW (lpString1=".", lpString2="Documents") returned -1
	[0113.918] StrStrW (lpFirst="documents", lpSrch="programdata") returned 0x0
	[0113.919] StrStrW (lpFirst="documents", lpSrch="$recycle.bin") returned 0x0
	[0113.919] StrStrW (lpFirst="documents", lpSrch="program files") returned 0x0
	[0113.919] StrStrW (lpFirst="documents", lpSrch="windows") returned 0x0
	[0113.919] StrStrW (lpFirst="documents", lpSrch="all users") returned 0x0
	[0113.919] StrStrW (lpFirst="documents", lpSrch="winnt") returned 0x0
	[0113.919] StrStrW (lpFirst="documents", lpSrch="appdata") returned 0x0
	[0113.919] StrStrW (lpFirst="documents", lpSrch="application data") returned 0x0
	[0113.919] StrStrW (lpFirst="documents", lpSrch="local settings") returned 0x0
	[0113.919] StrStrW (lpFirst="documents", lpSrch="boot") returned 0x0
	[0113.919] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0113.919] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0113.919] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc14d180, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc14d180, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0113.919] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0113.919] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0113.920] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0113.920] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0113.920] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0113.920] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc14d180, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc14d180, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0113.920] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0113.920] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0113.920] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0113.920] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9b57020, ftCreationTime.dwHighDateTime=0x1d58f54, ftLastAccessTime.dwLowDateTime=0x56172bc0, ftLastAccessTime.dwHighDateTime=0x1d56eb6, ftLastWriteTime.dwLowDateTime=0x56172bc0, ftLastWriteTime.dwHighDateTime=0x1d56eb6, nFileSizeHigh=0x0, nFileSizeLow=0x16511, dwReserved0=0x0, dwReserved1=0x0, cFileName="B2WwS.xlsx", cAlternateFileName="B2WWS~1.XLS")) returned 1
	[0113.920] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0113.920] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0113.920] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0113.920] StrStrW (lpFirst="b2wws.xlsx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0113.920] StrStrW (lpFirst="b2wws.xlsx", lpSrch="ntldr") returned 0x0
	[0113.920] StrStrW (lpFirst="b2wws.xlsx", lpSrch="pagefile.sys") returned 0x0
	[0113.920] StrStrW (lpFirst="b2wws.xlsx", lpSrch="ntdetect.com") returned 0x0
	[0113.920] StrStrW (lpFirst="b2wws.xlsx", lpSrch="autoexec.bat") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="desktop.ini") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="autorun.inf") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="ntuser.dat") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="iconcache.db") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="bootsect.bak") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="boot.ini") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="bootfont.bin") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="config.sys") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="io.sys") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="msdos.sys") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="ntuser.dat.log") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="thumbs.db") returned 0x0
	[0113.921] StrStrW (lpFirst="b2wws.xlsx", lpSrch="swapfile.sys") returned 0x0
	[0113.921] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\B2WwS.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\b2wws.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0113.922] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=91409) returned 1
	[0113.922] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0113.922] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0113.937] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0113.937] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3521c18
	[0113.937] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0113.938] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0113.938] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0113.938] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0113.955] GetLastError () returned 0x3e5
	[0113.955] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0113.955] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf35d54b0, ftCreationTime.dwHighDateTime=0x1d5e6a5, ftLastAccessTime.dwLowDateTime=0x125980f0, ftLastAccessTime.dwHighDateTime=0x1d5be7e, ftLastWriteTime.dwLowDateTime=0x125980f0, ftLastWriteTime.dwHighDateTime=0x1d5be7e, nFileSizeHigh=0x0, nFileSizeLow=0x11c36, dwReserved0=0x0, dwReserved1=0x0, cFileName="bKAq_r l5wQ8PPjFGY8.pptx", cAlternateFileName="BKAQ_R~1.PPT")) returned 1
	[0113.955] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0113.955] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0113.955] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0113.955] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0113.955] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="ntldr") returned 0x0
	[0113.955] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="pagefile.sys") returned 0x0
	[0113.955] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="ntdetect.com") returned 0x0
	[0113.955] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="autoexec.bat") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="desktop.ini") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="autorun.inf") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="ntuser.dat") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="iconcache.db") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="bootsect.bak") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="boot.ini") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="bootfont.bin") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="config.sys") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="io.sys") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="msdos.sys") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="ntuser.dat.log") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="thumbs.db") returned 0x0
	[0113.956] StrStrW (lpFirst="bkaq_r l5wq8ppjfgy8.pptx", lpSrch="swapfile.sys") returned 0x0
	[0113.956] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\bKAq_r l5wQ8PPjFGY8.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bkaq_r l5wq8ppjfgy8.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0113.957] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=72758) returned 1
	[0113.957] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0113.957] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0113.971] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0113.971] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3521c18
	[0113.971] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0113.972] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0113.972] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0113.972] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0113.983] GetLastError () returned 0x3e5
	[0113.983] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0113.983] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe34aa1f0, ftCreationTime.dwHighDateTime=0x1d5e19a, ftLastAccessTime.dwLowDateTime=0xe4e93a50, ftLastAccessTime.dwHighDateTime=0x1d5e6ca, ftLastWriteTime.dwLowDateTime=0xe4e93a50, ftLastWriteTime.dwHighDateTime=0x1d5e6ca, nFileSizeHigh=0x0, nFileSizeLow=0xfb1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CnKdAfDz9Qc.rtf", cAlternateFileName="CNKDAF~1.RTF")) returned 1
	[0113.983] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0113.983] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0113.983] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0113.983] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0113.983] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="ntldr") returned 0x0
	[0113.983] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="pagefile.sys") returned 0x0
	[0113.983] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="ntdetect.com") returned 0x0
	[0113.983] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="autoexec.bat") returned 0x0
	[0113.983] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="desktop.ini") returned 0x0
	[0113.983] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="autorun.inf") returned 0x0
	[0113.983] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="ntuser.dat") returned 0x0
	[0113.983] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="iconcache.db") returned 0x0
	[0113.983] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="bootsect.bak") returned 0x0
	[0113.983] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="boot.ini") returned 0x0
	[0113.984] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="bootfont.bin") returned 0x0
	[0113.984] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="config.sys") returned 0x0
	[0113.984] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="io.sys") returned 0x0
	[0113.984] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="msdos.sys") returned 0x0
	[0113.984] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="ntuser.dat.log") returned 0x0
	[0113.984] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="thumbs.db") returned 0x0
	[0113.984] StrStrW (lpFirst="cnkdafdz9qc.rtf", lpSrch="swapfile.sys") returned 0x0
	[0113.984] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CnKdAfDz9Qc.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\cnkdafdz9qc.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0113.984] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=64284) returned 1
	[0113.984] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0113.984] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0113.998] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0113.998] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3521c18
	[0113.999] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0114.000] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0114.000] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0114.000] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0114.044] GetLastError () returned 0x3e5
	[0114.044] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0114.044] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0114.044] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0114.044] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0114.044] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0114.044] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0114.044] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0114.044] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0114.044] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0114.045] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0114.045] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0114.045] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0114.045] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26b17c30, ftCreationTime.dwHighDateTime=0x1d5c291, ftLastAccessTime.dwLowDateTime=0x2e67d220, ftLastAccessTime.dwHighDateTime=0x1d562bb, ftLastWriteTime.dwLowDateTime=0x2e67d220, ftLastWriteTime.dwHighDateTime=0x1d562bb, nFileSizeHigh=0x0, nFileSizeLow=0x6968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ex0yzzZdMvZMWb5oP.docx", cAlternateFileName="EX0YZZ~1.DOC")) returned 1
	[0114.045] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0114.045] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0114.045] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0114.045] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0114.045] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="ntldr") returned 0x0
	[0114.045] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="pagefile.sys") returned 0x0
	[0114.045] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="ntdetect.com") returned 0x0
	[0114.045] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="autoexec.bat") returned 0x0
	[0114.045] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="desktop.ini") returned 0x0
	[0114.045] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="autorun.inf") returned 0x0
	[0114.045] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="ntuser.dat") returned 0x0
	[0114.045] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="iconcache.db") returned 0x0
	[0114.045] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="bootsect.bak") returned 0x0
	[0114.045] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="boot.ini") returned 0x0
	[0114.046] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="bootfont.bin") returned 0x0
	[0114.046] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="config.sys") returned 0x0
	[0114.046] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="io.sys") returned 0x0
	[0114.046] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="msdos.sys") returned 0x0
	[0114.046] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="ntuser.dat.log") returned 0x0
	[0114.046] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="thumbs.db") returned 0x0
	[0114.046] StrStrW (lpFirst="ex0yzzzdmvzmwb5op.docx", lpSrch="swapfile.sys") returned 0x0
	[0114.046] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ex0yzzZdMvZMWb5oP.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ex0yzzzdmvzmwb5op.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0114.046] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=26984) returned 1
	[0114.046] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0114.046] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0114.060] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.060] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3521c18
	[0114.060] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0114.061] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0114.061] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0114.061] ReadFile (in: hFile=0x3c8, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0114.072] GetLastError () returned 0x3e5
	[0114.072] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0114.072] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x774c11a0, ftCreationTime.dwHighDateTime=0x1d5e168, ftLastAccessTime.dwLowDateTime=0x9e8f3450, ftLastAccessTime.dwHighDateTime=0x1d5e1d0, ftLastWriteTime.dwLowDateTime=0x9e8f3450, ftLastWriteTime.dwHighDateTime=0x1d5e1d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBUjSuawrY1cxW1", cAlternateFileName="GBUJSU~1")) returned 1
	[0114.072] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0114.072] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0114.072] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0114.072] lstrcmpW (lpString1="..", lpString2="GBUjSuawrY1cxW1") returned -1
	[0114.072] lstrcmpW (lpString1=".", lpString2="GBUjSuawrY1cxW1") returned -1
	[0114.072] StrStrW (lpFirst="gbujsuawry1cxw1", lpSrch="programdata") returned 0x0
	[0114.072] StrStrW (lpFirst="gbujsuawry1cxw1", lpSrch="$recycle.bin") returned 0x0
	[0114.072] StrStrW (lpFirst="gbujsuawry1cxw1", lpSrch="program files") returned 0x0
	[0114.072] StrStrW (lpFirst="gbujsuawry1cxw1", lpSrch="windows") returned 0x0
	[0114.072] StrStrW (lpFirst="gbujsuawry1cxw1", lpSrch="all users") returned 0x0
	[0114.072] StrStrW (lpFirst="gbujsuawry1cxw1", lpSrch="winnt") returned 0x0
	[0114.072] StrStrW (lpFirst="gbujsuawry1cxw1", lpSrch="appdata") returned 0x0
	[0114.072] StrStrW (lpFirst="gbujsuawry1cxw1", lpSrch="application data") returned 0x0
	[0114.072] StrStrW (lpFirst="gbujsuawry1cxw1", lpSrch="local settings") returned 0x0
	[0114.073] StrStrW (lpFirst="gbujsuawry1cxw1", lpSrch="boot") returned 0x0
	[0114.073] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0114.073] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.073] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GBUjSuawrY1cxW1\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x774c11a0, ftCreationTime.dwHighDateTime=0x1d5e168, ftLastAccessTime.dwLowDateTime=0x9e8f3450, ftLastAccessTime.dwHighDateTime=0x1d5e1d0, ftLastWriteTime.dwLowDateTime=0x9e8f3450, ftLastWriteTime.dwHighDateTime=0x1d5e1d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ead0
	[0114.073] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.073] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.073] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0114.073] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0114.073] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.073] FindNextFileW (in: hFindFile=0x61ead0, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x774c11a0, ftCreationTime.dwHighDateTime=0x1d5e168, ftLastAccessTime.dwLowDateTime=0x9e8f3450, ftLastAccessTime.dwHighDateTime=0x1d5e1d0, ftLastWriteTime.dwLowDateTime=0x9e8f3450, ftLastWriteTime.dwHighDateTime=0x1d5e1d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0114.073] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.073] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0114.073] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.073] FindNextFileW (in: hFindFile=0x61ead0, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfae94df0, ftCreationTime.dwHighDateTime=0x1d5e1e2, ftLastAccessTime.dwLowDateTime=0x63e948d0, ftLastAccessTime.dwHighDateTime=0x1d5e4c9, ftLastWriteTime.dwLowDateTime=0x63e948d0, ftLastWriteTime.dwHighDateTime=0x1d5e4c9, nFileSizeHigh=0x0, nFileSizeLow=0x116db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qj7SeAjO hbObQDHc.xlsx", cAlternateFileName="QJ7SEA~1.XLS")) returned 1
	[0114.073] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.073] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x351fdc8
	[0114.073] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="ntldr") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="pagefile.sys") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="ntdetect.com") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="autoexec.bat") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="desktop.ini") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="autorun.inf") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="ntuser.dat") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="iconcache.db") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="bootsect.bak") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="boot.ini") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="bootfont.bin") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="config.sys") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="io.sys") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="msdos.sys") returned 0x0
	[0114.074] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="ntuser.dat.log") returned 0x0
	[0114.075] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="thumbs.db") returned 0x0
	[0114.075] StrStrW (lpFirst="qj7seajo hbobqdhc.xlsx", lpSrch="swapfile.sys") returned 0x0
	[0114.075] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GBUjSuawrY1cxW1\\Qj7SeAjO hbObQDHc.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbujsuawry1cxw1\\qj7seajo hbobqdhc.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0114.075] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=71387) returned 1
	[0114.075] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0114.075] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0114.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0114.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3522790
	[0114.229] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0114.230] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0114.230] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0114.230] ReadFile (in: hFile=0x3c0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0114.241] GetLastError () returned 0x3e5
	[0114.241] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fdc8 | out: hHeap=0x5f0000) returned 1
	[0114.241] FindNextFileW (in: hFindFile=0x61ead0, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3b237e0, ftCreationTime.dwHighDateTime=0x1d5de2d, ftLastAccessTime.dwLowDateTime=0xcfecf460, ftLastAccessTime.dwHighDateTime=0x1d5da96, ftLastWriteTime.dwLowDateTime=0xcfecf460, ftLastWriteTime.dwHighDateTime=0x1d5da96, nFileSizeHigh=0x0, nFileSizeLow=0x13b81, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdnAIKhyNP-.odp", cAlternateFileName="RDNAIK~1.ODP")) returned 1
	[0114.242] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.242] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x351fdc8
	[0114.242] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="ntldr") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="pagefile.sys") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="ntdetect.com") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="autoexec.bat") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="desktop.ini") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="autorun.inf") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="ntuser.dat") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="iconcache.db") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="bootsect.bak") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="boot.ini") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="bootfont.bin") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="config.sys") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="io.sys") returned 0x0
	[0114.242] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="msdos.sys") returned 0x0
	[0114.243] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="ntuser.dat.log") returned 0x0
	[0114.243] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="thumbs.db") returned 0x0
	[0114.243] StrStrW (lpFirst="rdnaikhynp-.odp", lpSrch="swapfile.sys") returned 0x0
	[0114.243] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GBUjSuawrY1cxW1\\rdnAIKhyNP-.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbujsuawry1cxw1\\rdnaikhynp-.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0114.243] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=80769) returned 1
	[0114.243] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0114.243] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0114.267] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0114.267] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3522790
	[0114.267] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0114.268] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0114.268] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0114.268] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.278] GetLastError () returned 0x3e5
	[0114.278] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fdc8 | out: hHeap=0x5f0000) returned 1
	[0114.278] FindNextFileW (in: hFindFile=0x61ead0, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19c1c110, ftCreationTime.dwHighDateTime=0x1d5dd53, ftLastAccessTime.dwLowDateTime=0x8de07e90, ftLastAccessTime.dwHighDateTime=0x1d5dc97, ftLastWriteTime.dwLowDateTime=0x8de07e90, ftLastWriteTime.dwHighDateTime=0x1d5dc97, nFileSizeHigh=0x0, nFileSizeLow=0x901b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y1xI22.doc", cAlternateFileName="")) returned 1
	[0114.279] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.279] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x351fdc8
	[0114.279] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="ntldr") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="pagefile.sys") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="ntdetect.com") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="autoexec.bat") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="desktop.ini") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="autorun.inf") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="ntuser.dat") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="iconcache.db") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="bootsect.bak") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="boot.ini") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="bootfont.bin") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="config.sys") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="io.sys") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="msdos.sys") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="ntuser.dat.log") returned 0x0
	[0114.279] StrStrW (lpFirst="y1xi22.doc", lpSrch="thumbs.db") returned 0x0
	[0114.280] StrStrW (lpFirst="y1xi22.doc", lpSrch="swapfile.sys") returned 0x0
	[0114.280] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GBUjSuawrY1cxW1\\Y1xI22.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbujsuawry1cxw1\\y1xi22.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c0
	[0114.280] GetFileSizeEx (in: hFile=0x3c0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=36891) returned 1
	[0114.280] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0114.280] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0114.292] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0114.292] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3522790
	[0114.292] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0114.293] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0114.293] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0114.293] ReadFile (in: hFile=0x3c0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.301] GetLastError () returned 0x3e5
	[0114.301] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fdc8 | out: hHeap=0x5f0000) returned 1
	[0114.301] FindNextFileW (in: hFindFile=0x61ead0, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19c1c110, ftCreationTime.dwHighDateTime=0x1d5dd53, ftLastAccessTime.dwLowDateTime=0x8de07e90, ftLastAccessTime.dwHighDateTime=0x1d5dc97, ftLastWriteTime.dwLowDateTime=0x8de07e90, ftLastWriteTime.dwHighDateTime=0x1d5dc97, nFileSizeHigh=0x0, nFileSizeLow=0x901b, dwReserved0=0x0, dwReserved1=0x0, cFileName="y1xi22.doc", cAlternateFileName="")) returned 0
	[0114.301] FindClose (in: hFindFile=0x61ead0 | out: hFindFile=0x61ead0) returned 1
	[0114.301] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x63f590
	[0114.301] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.301] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x40819f8
	[0114.301] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0114.301] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GBUjSuawrY1cxW1\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gbujsuawry1cxw1\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c8
	[0114.302] WriteFile (in: hFile=0x3c8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0114.303] CloseHandle (hObject=0x3c8) returned 1
	[0114.304] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0114.304] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63f590 | out: hHeap=0x5f0000) returned 1
	[0114.304] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0114.304] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0114.304] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9557d0, ftCreationTime.dwHighDateTime=0x1d576bb, ftLastAccessTime.dwLowDateTime=0x5f42dae0, ftLastAccessTime.dwHighDateTime=0x1d55f35, ftLastWriteTime.dwLowDateTime=0x5f42dae0, ftLastWriteTime.dwHighDateTime=0x1d55f35, nFileSizeHigh=0x0, nFileSizeLow=0x1f3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="gHmp.docx", cAlternateFileName="GHMP~1.DOC")) returned 1
	[0114.304] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0114.304] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0114.304] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0114.304] StrStrW (lpFirst="ghmp.docx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0114.304] StrStrW (lpFirst="ghmp.docx", lpSrch="ntldr") returned 0x0
	[0114.304] StrStrW (lpFirst="ghmp.docx", lpSrch="pagefile.sys") returned 0x0
	[0114.304] StrStrW (lpFirst="ghmp.docx", lpSrch="ntdetect.com") returned 0x0
	[0114.304] StrStrW (lpFirst="ghmp.docx", lpSrch="autoexec.bat") returned 0x0
	[0114.304] StrStrW (lpFirst="ghmp.docx", lpSrch="desktop.ini") returned 0x0
	[0114.304] StrStrW (lpFirst="ghmp.docx", lpSrch="autorun.inf") returned 0x0
	[0114.304] StrStrW (lpFirst="ghmp.docx", lpSrch="ntuser.dat") returned 0x0
	[0114.305] StrStrW (lpFirst="ghmp.docx", lpSrch="iconcache.db") returned 0x0
	[0114.305] StrStrW (lpFirst="ghmp.docx", lpSrch="bootsect.bak") returned 0x0
	[0114.305] StrStrW (lpFirst="ghmp.docx", lpSrch="boot.ini") returned 0x0
	[0114.305] StrStrW (lpFirst="ghmp.docx", lpSrch="bootfont.bin") returned 0x0
	[0114.305] StrStrW (lpFirst="ghmp.docx", lpSrch="config.sys") returned 0x0
	[0114.305] StrStrW (lpFirst="ghmp.docx", lpSrch="io.sys") returned 0x0
	[0114.305] StrStrW (lpFirst="ghmp.docx", lpSrch="msdos.sys") returned 0x0
	[0114.305] StrStrW (lpFirst="ghmp.docx", lpSrch="ntuser.dat.log") returned 0x0
	[0114.305] StrStrW (lpFirst="ghmp.docx", lpSrch="thumbs.db") returned 0x0
	[0114.305] StrStrW (lpFirst="ghmp.docx", lpSrch="swapfile.sys") returned 0x0
	[0114.305] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\gHmp.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ghmp.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0114.305] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=7995) returned 1
	[0114.305] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0114.305] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0114.318] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0114.319] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3522790
	[0114.319] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0114.320] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0114.320] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0114.320] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.331] GetLastError () returned 0x3e5
	[0114.331] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0114.331] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb740020, ftCreationTime.dwHighDateTime=0x1d58f19, ftLastAccessTime.dwLowDateTime=0xa4d97b00, ftLastAccessTime.dwHighDateTime=0x1d56fce, ftLastWriteTime.dwLowDateTime=0xa4d97b00, ftLastWriteTime.dwHighDateTime=0x1d56fce, nFileSizeHigh=0x0, nFileSizeLow=0x1185f, dwReserved0=0x0, dwReserved1=0x0, cFileName="H_XLsW OknG.xlsx", cAlternateFileName="H_XLSW~1.XLS")) returned 1
	[0114.331] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0114.331] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0114.331] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="ntldr") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="pagefile.sys") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="ntdetect.com") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="autoexec.bat") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="desktop.ini") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="autorun.inf") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="ntuser.dat") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="iconcache.db") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="bootsect.bak") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="boot.ini") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="bootfont.bin") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="config.sys") returned 0x0
	[0114.331] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="io.sys") returned 0x0
	[0114.332] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="msdos.sys") returned 0x0
	[0114.332] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="ntuser.dat.log") returned 0x0
	[0114.332] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="thumbs.db") returned 0x0
	[0114.332] StrStrW (lpFirst="h_xlsw okng.xlsx", lpSrch="swapfile.sys") returned 0x0
	[0114.332] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H_XLsW OknG.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\h_xlsw okng.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0114.332] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=71775) returned 1
	[0114.332] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0114.332] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0114.345] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0114.345] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3522790
	[0114.345] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0114.346] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0114.346] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0114.346] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.356] GetLastError () returned 0x3e5
	[0114.356] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0114.356] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3559f0e0, ftCreationTime.dwHighDateTime=0x1d5dea3, ftLastAccessTime.dwLowDateTime=0x48f09d10, ftLastAccessTime.dwHighDateTime=0x1d5e0f7, ftLastWriteTime.dwLowDateTime=0x48f09d10, ftLastWriteTime.dwHighDateTime=0x1d5e0f7, nFileSizeHigh=0x0, nFileSizeLow=0x63c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISYWXm4yMp05dI6.pptx", cAlternateFileName="ISYWXM~1.PPT")) returned 1
	[0114.356] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0114.356] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0114.356] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0114.356] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0114.356] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="ntldr") returned 0x0
	[0114.356] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="pagefile.sys") returned 0x0
	[0114.356] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="ntdetect.com") returned 0x0
	[0114.356] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="autoexec.bat") returned 0x0
	[0114.356] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="desktop.ini") returned 0x0
	[0114.356] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="autorun.inf") returned 0x0
	[0114.356] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="ntuser.dat") returned 0x0
	[0114.356] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="iconcache.db") returned 0x0
	[0114.356] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="bootsect.bak") returned 0x0
	[0114.357] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="boot.ini") returned 0x0
	[0114.357] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="bootfont.bin") returned 0x0
	[0114.357] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="config.sys") returned 0x0
	[0114.357] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="io.sys") returned 0x0
	[0114.357] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="msdos.sys") returned 0x0
	[0114.357] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="ntuser.dat.log") returned 0x0
	[0114.357] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="thumbs.db") returned 0x0
	[0114.357] StrStrW (lpFirst="isywxm4ymp05di6.pptx", lpSrch="swapfile.sys") returned 0x0
	[0114.357] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ISYWXm4yMp05dI6.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\isywxm4ymp05di6.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0114.357] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=25544) returned 1
	[0114.357] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0114.357] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0114.371] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.371] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3522790
	[0114.371] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0114.372] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0114.372] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0114.372] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.379] GetLastError () returned 0x3e5
	[0114.379] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0114.379] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b1a070, ftCreationTime.dwHighDateTime=0x1d592ed, ftLastAccessTime.dwLowDateTime=0xa155b1d0, ftLastAccessTime.dwHighDateTime=0x1d5d17e, ftLastWriteTime.dwLowDateTime=0xa155b1d0, ftLastWriteTime.dwHighDateTime=0x1d5d17e, nFileSizeHigh=0x0, nFileSizeLow=0xeab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="k5n4LQZahDLV.pptx", cAlternateFileName="K5N4LQ~1.PPT")) returned 1
	[0114.379] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0114.379] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0114.379] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0114.379] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0114.379] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="ntldr") returned 0x0
	[0114.379] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="pagefile.sys") returned 0x0
	[0114.379] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="ntdetect.com") returned 0x0
	[0114.379] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="autoexec.bat") returned 0x0
	[0114.380] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="desktop.ini") returned 0x0
	[0114.380] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="autorun.inf") returned 0x0
	[0114.380] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="ntuser.dat") returned 0x0
	[0114.380] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="iconcache.db") returned 0x0
	[0114.380] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="bootsect.bak") returned 0x0
	[0114.380] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="boot.ini") returned 0x0
	[0114.380] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="bootfont.bin") returned 0x0
	[0114.380] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="config.sys") returned 0x0
	[0114.380] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="io.sys") returned 0x0
	[0114.380] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="msdos.sys") returned 0x0
	[0114.380] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="ntuser.dat.log") returned 0x0
	[0114.380] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="thumbs.db") returned 0x0
	[0114.381] StrStrW (lpFirst="k5n4lqzahdlv.pptx", lpSrch="swapfile.sys") returned 0x0
	[0114.381] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\k5n4LQZahDLV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\k5n4lqzahdlv.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c8
	[0114.381] GetFileSizeEx (in: hFile=0x3c8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=60088) returned 1
	[0114.381] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0114.381] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0114.393] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0114.393] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x3522790
	[0114.394] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0114.395] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0114.395] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0114.395] ReadFile (in: hFile=0x3c8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0114.510] GetLastError () returned 0x3e5
	[0114.510] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0114.510] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0114.510] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0114.510] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0114.510] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0114.510] lstrcmpW (lpString1="..", lpString2="My Music") returned -1
	[0114.510] lstrcmpW (lpString1=".", lpString2="My Music") returned -1
	[0114.510] StrStrW (lpFirst="my music", lpSrch="programdata") returned 0x0
	[0114.510] StrStrW (lpFirst="my music", lpSrch="$recycle.bin") returned 0x0
	[0114.511] StrStrW (lpFirst="my music", lpSrch="program files") returned 0x0
	[0114.511] StrStrW (lpFirst="my music", lpSrch="windows") returned 0x0
	[0114.511] StrStrW (lpFirst="my music", lpSrch="all users") returned 0x0
	[0114.511] StrStrW (lpFirst="my music", lpSrch="winnt") returned 0x0
	[0114.511] StrStrW (lpFirst="my music", lpSrch="appdata") returned 0x0
	[0114.511] StrStrW (lpFirst="my music", lpSrch="application data") returned 0x0
	[0114.511] StrStrW (lpFirst="my music", lpSrch="local settings") returned 0x0
	[0114.511] StrStrW (lpFirst="my music", lpSrch="boot") returned 0x0
	[0114.511] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0114.511] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0114.511] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="摸͒麘cd")) returned 0xffffffff
	[0114.514] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0114.514] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0114.514] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0114.514] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0114.514] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0114.514] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0114.514] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0114.514] lstrcmpW (lpString1="..", lpString2="My Pictures") returned -1
	[0114.515] lstrcmpW (lpString1=".", lpString2="My Pictures") returned -1
	[0114.515] StrStrW (lpFirst="my pictures", lpSrch="programdata") returned 0x0
	[0114.515] StrStrW (lpFirst="my pictures", lpSrch="$recycle.bin") returned 0x0
	[0114.515] StrStrW (lpFirst="my pictures", lpSrch="program files") returned 0x0
	[0114.515] StrStrW (lpFirst="my pictures", lpSrch="windows") returned 0x0
	[0114.515] StrStrW (lpFirst="my pictures", lpSrch="all users") returned 0x0
	[0114.515] StrStrW (lpFirst="my pictures", lpSrch="winnt") returned 0x0
	[0114.515] StrStrW (lpFirst="my pictures", lpSrch="appdata") returned 0x0
	[0114.515] StrStrW (lpFirst="my pictures", lpSrch="application data") returned 0x0
	[0114.515] StrStrW (lpFirst="my pictures", lpSrch="local settings") returned 0x0
	[0114.515] StrStrW (lpFirst="my pictures", lpSrch="boot") returned 0x0
	[0114.515] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0114.515] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0114.515] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="摸͒麘cj")) returned 0xffffffff
	[0114.516] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0114.516] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0114.516] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0114.516] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1
	[0114.516] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0114.516] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0114.516] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0114.516] lstrcmpW (lpString1="..", lpString2="My Shapes") returned -1
	[0114.516] lstrcmpW (lpString1=".", lpString2="My Shapes") returned -1
	[0114.516] StrStrW (lpFirst="my shapes", lpSrch="programdata") returned 0x0
	[0114.516] StrStrW (lpFirst="my shapes", lpSrch="$recycle.bin") returned 0x0
	[0114.516] StrStrW (lpFirst="my shapes", lpSrch="program files") returned 0x0
	[0114.516] StrStrW (lpFirst="my shapes", lpSrch="windows") returned 0x0
	[0114.516] StrStrW (lpFirst="my shapes", lpSrch="all users") returned 0x0
	[0114.516] StrStrW (lpFirst="my shapes", lpSrch="winnt") returned 0x0
	[0114.516] StrStrW (lpFirst="my shapes", lpSrch="appdata") returned 0x0
	[0114.516] StrStrW (lpFirst="my shapes", lpSrch="application data") returned 0x0
	[0114.517] StrStrW (lpFirst="my shapes", lpSrch="local settings") returned 0x0
	[0114.517] StrStrW (lpFirst="my shapes", lpSrch="boot") returned 0x0
	[0114.517] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0114.517] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0114.517] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0114.521] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0114.521] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0114.521] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0114.521] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0114.521] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0114.521] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0114.521] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0114.521] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0114.521] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0114.521] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0114.521] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0114.521] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0114.521] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0114.521] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0114.521] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0114.522] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0114.522] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0114.522] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0114.522] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0114.522] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0114.522] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1
	[0114.522] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0114.522] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0114.522] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0114.522] StrStrW (lpFirst="favorites.vss", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0114.522] StrStrW (lpFirst="favorites.vss", lpSrch="ntldr") returned 0x0
	[0114.522] StrStrW (lpFirst="favorites.vss", lpSrch="pagefile.sys") returned 0x0
	[0114.522] StrStrW (lpFirst="favorites.vss", lpSrch="ntdetect.com") returned 0x0
	[0114.522] StrStrW (lpFirst="favorites.vss", lpSrch="autoexec.bat") returned 0x0
	[0114.522] StrStrW (lpFirst="favorites.vss", lpSrch="desktop.ini") returned 0x0
	[0114.522] StrStrW (lpFirst="favorites.vss", lpSrch="autorun.inf") returned 0x0
	[0114.522] StrStrW (lpFirst="favorites.vss", lpSrch="ntuser.dat") returned 0x0
	[0114.523] StrStrW (lpFirst="favorites.vss", lpSrch="iconcache.db") returned 0x0
	[0114.523] StrStrW (lpFirst="favorites.vss", lpSrch="bootsect.bak") returned 0x0
	[0114.523] StrStrW (lpFirst="favorites.vss", lpSrch="boot.ini") returned 0x0
	[0114.523] StrStrW (lpFirst="favorites.vss", lpSrch="bootfont.bin") returned 0x0
	[0114.523] StrStrW (lpFirst="favorites.vss", lpSrch="config.sys") returned 0x0
	[0114.523] StrStrW (lpFirst="favorites.vss", lpSrch="io.sys") returned 0x0
	[0114.523] StrStrW (lpFirst="favorites.vss", lpSrch="msdos.sys") returned 0x0
	[0114.523] StrStrW (lpFirst="favorites.vss", lpSrch="ntuser.dat.log") returned 0x0
	[0114.523] StrStrW (lpFirst="favorites.vss", lpSrch="thumbs.db") returned 0x0
	[0114.523] StrStrW (lpFirst="favorites.vss", lpSrch="swapfile.sys") returned 0x0
	[0114.523] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3cc
	[0114.524] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=0) returned 1
	[0114.525] CloseHandle (hObject=0x3cc) returned 1
	[0114.525] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0114.525] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1
	[0114.525] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0114.525] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0114.525] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0114.525] lstrcmpW (lpString1="..", lpString2="_private") returned -1
	[0114.525] lstrcmpW (lpString1=".", lpString2="_private") returned -1
	[0114.525] StrStrW (lpFirst="_private", lpSrch="programdata") returned 0x0
	[0114.525] StrStrW (lpFirst="_private", lpSrch="$recycle.bin") returned 0x0
	[0114.525] StrStrW (lpFirst="_private", lpSrch="program files") returned 0x0
	[0114.525] StrStrW (lpFirst="_private", lpSrch="windows") returned 0x0
	[0114.525] StrStrW (lpFirst="_private", lpSrch="all users") returned 0x0
	[0114.525] StrStrW (lpFirst="_private", lpSrch="winnt") returned 0x0
	[0114.526] StrStrW (lpFirst="_private", lpSrch="appdata") returned 0x0
	[0114.526] StrStrW (lpFirst="_private", lpSrch="application data") returned 0x0
	[0114.526] StrStrW (lpFirst="_private", lpSrch="local settings") returned 0x0
	[0114.526] StrStrW (lpFirst="_private", lpSrch="boot") returned 0x0
	[0114.526] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0114.526] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0114.526] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000003, cFileName=".", cAlternateFileName="")) returned 0x61e950
	[0115.662] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.662] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.662] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0115.662] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0115.662] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.662] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000003, cFileName="..", cAlternateFileName="")) returned 1
	[0115.662] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.662] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0115.662] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.662] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x3000003, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0115.662] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.662] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x3517098
	[0115.662] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.662] StrStrW (lpFirst="folder.ico", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.662] StrStrW (lpFirst="folder.ico", lpSrch="ntldr") returned 0x0
	[0115.662] StrStrW (lpFirst="folder.ico", lpSrch="pagefile.sys") returned 0x0
	[0115.662] StrStrW (lpFirst="folder.ico", lpSrch="ntdetect.com") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="autoexec.bat") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="desktop.ini") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="autorun.inf") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="ntuser.dat") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="iconcache.db") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="bootsect.bak") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="boot.ini") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="bootfont.bin") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="config.sys") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="io.sys") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="msdos.sys") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="ntuser.dat.log") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="thumbs.db") returned 0x0
	[0115.663] StrStrW (lpFirst="folder.ico", lpSrch="swapfile.sys") returned 0x0
	[0115.663] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0115.664] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=29926) returned 1
	[0115.664] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.664] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0115.676] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0115.676] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0115.676] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0115.677] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0115.677] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0115.677] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0115.700] GetLastError () returned 0x3e5
	[0115.700] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0115.700] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x3000003, cFileName="folder.ico", cAlternateFileName="")) returned 0
	[0115.700] FindClose (in: hFindFile=0x61e950 | out: hFindFile=0x61e950) returned 1
	[0115.700] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0115.700] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.701] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x3517098
	[0115.701] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.701] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x38c
	[0115.701] WriteFile (in: hFile=0x38c, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e514, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e514*=0x512, lpOverlapped=0x0) returned 1
	[0115.702] CloseHandle (hObject=0x38c) returned 1
	[0115.703] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0115.703] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0115.703] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0115.703] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0115.703] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0
	[0115.703] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0115.704] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0115.704] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0115.704] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0115.705] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0115.705] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c4
	[0115.706] WriteFile (in: hFile=0x3c4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0115.707] CloseHandle (hObject=0x3c4) returned 1
	[0115.708] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0115.708] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0115.708] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0115.708] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0115.708] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0115.708] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0115.708] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0115.708] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0115.708] lstrcmpW (lpString1="..", lpString2="My Videos") returned -1
	[0115.708] lstrcmpW (lpString1=".", lpString2="My Videos") returned -1
	[0115.708] StrStrW (lpFirst="my videos", lpSrch="programdata") returned 0x0
	[0115.708] StrStrW (lpFirst="my videos", lpSrch="$recycle.bin") returned 0x0
	[0115.708] StrStrW (lpFirst="my videos", lpSrch="program files") returned 0x0
	[0115.708] StrStrW (lpFirst="my videos", lpSrch="windows") returned 0x0
	[0115.708] StrStrW (lpFirst="my videos", lpSrch="all users") returned 0x0
	[0115.708] StrStrW (lpFirst="my videos", lpSrch="winnt") returned 0x0
	[0115.708] StrStrW (lpFirst="my videos", lpSrch="appdata") returned 0x0
	[0115.709] StrStrW (lpFirst="my videos", lpSrch="application data") returned 0x0
	[0115.709] StrStrW (lpFirst="my videos", lpSrch="local settings") returned 0x0
	[0115.709] StrStrW (lpFirst="my videos", lpSrch="boot") returned 0x0
	[0115.709] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0115.709] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0115.709] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="摸͒麘cf")) returned 0xffffffff
	[0115.709] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0115.709] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0115.709] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0115.709] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae610560, ftCreationTime.dwHighDateTime=0x1d58bf5, ftLastAccessTime.dwLowDateTime=0xfc0ba7a0, ftLastAccessTime.dwHighDateTime=0x1d574e6, ftLastWriteTime.dwLowDateTime=0xfc0ba7a0, ftLastWriteTime.dwHighDateTime=0x1d574e6, nFileSizeHigh=0x0, nFileSizeLow=0x133a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NBaEY4w.docx", cAlternateFileName="NBAEY4~1.DOC")) returned 1
	[0115.709] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0115.709] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0115.709] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0115.709] StrStrW (lpFirst="nbaey4w.docx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.709] StrStrW (lpFirst="nbaey4w.docx", lpSrch="ntldr") returned 0x0
	[0115.709] StrStrW (lpFirst="nbaey4w.docx", lpSrch="pagefile.sys") returned 0x0
	[0115.709] StrStrW (lpFirst="nbaey4w.docx", lpSrch="ntdetect.com") returned 0x0
	[0115.709] StrStrW (lpFirst="nbaey4w.docx", lpSrch="autoexec.bat") returned 0x0
	[0115.709] StrStrW (lpFirst="nbaey4w.docx", lpSrch="desktop.ini") returned 0x0
	[0115.709] StrStrW (lpFirst="nbaey4w.docx", lpSrch="autorun.inf") returned 0x0
	[0115.709] StrStrW (lpFirst="nbaey4w.docx", lpSrch="ntuser.dat") returned 0x0
	[0115.709] StrStrW (lpFirst="nbaey4w.docx", lpSrch="iconcache.db") returned 0x0
	[0115.709] StrStrW (lpFirst="nbaey4w.docx", lpSrch="bootsect.bak") returned 0x0
	[0115.709] StrStrW (lpFirst="nbaey4w.docx", lpSrch="boot.ini") returned 0x0
	[0115.709] StrStrW (lpFirst="nbaey4w.docx", lpSrch="bootfont.bin") returned 0x0
	[0115.710] StrStrW (lpFirst="nbaey4w.docx", lpSrch="config.sys") returned 0x0
	[0115.710] StrStrW (lpFirst="nbaey4w.docx", lpSrch="io.sys") returned 0x0
	[0115.710] StrStrW (lpFirst="nbaey4w.docx", lpSrch="msdos.sys") returned 0x0
	[0115.710] StrStrW (lpFirst="nbaey4w.docx", lpSrch="ntuser.dat.log") returned 0x0
	[0115.710] StrStrW (lpFirst="nbaey4w.docx", lpSrch="thumbs.db") returned 0x0
	[0115.710] StrStrW (lpFirst="nbaey4w.docx", lpSrch="swapfile.sys") returned 0x0
	[0115.710] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NBaEY4w.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nbaey4w.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0115.710] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=78753) returned 1
	[0115.710] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.710] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0115.720] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0115.720] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.720] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0115.721] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0115.721] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0115.721] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0115.729] GetLastError () returned 0x3e5
	[0115.729] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0115.729] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28166f40, ftCreationTime.dwHighDateTime=0x1d5cd59, ftLastAccessTime.dwLowDateTime=0x4a081120, ftLastAccessTime.dwHighDateTime=0x1d580bb, ftLastWriteTime.dwLowDateTime=0x4a081120, ftLastWriteTime.dwHighDateTime=0x1d580bb, nFileSizeHigh=0x0, nFileSizeLow=0x1439e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NotZWjjg-Ncw.docx", cAlternateFileName="NOTZWJ~1.DOC")) returned 1
	[0115.729] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0115.729] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0115.729] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0115.729] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.729] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="ntldr") returned 0x0
	[0115.729] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="pagefile.sys") returned 0x0
	[0115.729] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="ntdetect.com") returned 0x0
	[0115.729] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="autoexec.bat") returned 0x0
	[0115.729] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="desktop.ini") returned 0x0
	[0115.729] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="autorun.inf") returned 0x0
	[0115.730] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="ntuser.dat") returned 0x0
	[0115.730] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="iconcache.db") returned 0x0
	[0115.730] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="bootsect.bak") returned 0x0
	[0115.730] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="boot.ini") returned 0x0
	[0115.730] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="bootfont.bin") returned 0x0
	[0115.730] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="config.sys") returned 0x0
	[0115.730] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="io.sys") returned 0x0
	[0115.730] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="msdos.sys") returned 0x0
	[0115.730] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="ntuser.dat.log") returned 0x0
	[0115.730] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="thumbs.db") returned 0x0
	[0115.730] StrStrW (lpFirst="notzwjjg-ncw.docx", lpSrch="swapfile.sys") returned 0x0
	[0115.730] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NotZWjjg-Ncw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\notzwjjg-ncw.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0115.730] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=82846) returned 1
	[0115.730] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.730] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0115.739] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0115.740] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.740] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0115.740] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0115.740] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0115.740] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0115.748] GetLastError () returned 0x3e5
	[0115.748] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0115.748] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a95d90, ftCreationTime.dwHighDateTime=0x1d5c0c9, ftLastAccessTime.dwLowDateTime=0x7d3b3ef0, ftLastAccessTime.dwHighDateTime=0x1d5e2f4, ftLastWriteTime.dwLowDateTime=0x7d3b3ef0, ftLastWriteTime.dwHighDateTime=0x1d5e2f4, nFileSizeHigh=0x0, nFileSizeLow=0xc65e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NtyXL63 JD.pptx", cAlternateFileName="NTYXL6~1.PPT")) returned 1
	[0115.748] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0115.748] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0115.748] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0115.748] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.748] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="ntldr") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="pagefile.sys") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="ntdetect.com") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="autoexec.bat") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="desktop.ini") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="autorun.inf") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="ntuser.dat") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="iconcache.db") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="bootsect.bak") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="boot.ini") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="bootfont.bin") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="config.sys") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="io.sys") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="msdos.sys") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="ntuser.dat.log") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="thumbs.db") returned 0x0
	[0115.749] StrStrW (lpFirst="ntyxl63 jd.pptx", lpSrch="swapfile.sys") returned 0x0
	[0115.749] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NtyXL63 JD.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ntyxl63 jd.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0115.749] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=50782) returned 1
	[0115.749] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.750] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0115.760] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.760] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.760] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0115.761] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0115.761] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0115.761] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0115.767] GetLastError () returned 0x3e5
	[0115.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0115.767] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1
	[0115.767] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0115.767] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0115.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0115.767] lstrcmpW (lpString1="..", lpString2="Outlook Files") returned -1
	[0115.767] lstrcmpW (lpString1=".", lpString2="Outlook Files") returned -1
	[0115.767] StrStrW (lpFirst="outlook files", lpSrch="programdata") returned 0x0
	[0115.767] StrStrW (lpFirst="outlook files", lpSrch="$recycle.bin") returned 0x0
	[0115.767] StrStrW (lpFirst="outlook files", lpSrch="program files") returned 0x0
	[0115.767] StrStrW (lpFirst="outlook files", lpSrch="windows") returned 0x0
	[0115.767] StrStrW (lpFirst="outlook files", lpSrch="all users") returned 0x0
	[0115.767] StrStrW (lpFirst="outlook files", lpSrch="winnt") returned 0x0
	[0115.768] StrStrW (lpFirst="outlook files", lpSrch="appdata") returned 0x0
	[0115.768] StrStrW (lpFirst="outlook files", lpSrch="application data") returned 0x0
	[0115.768] StrStrW (lpFirst="outlook files", lpSrch="local settings") returned 0x0
	[0115.768] StrStrW (lpFirst="outlook files", lpSrch="boot") returned 0x0
	[0115.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0115.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0115.768] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0115.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0115.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0115.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0115.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0115.768] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0115.768] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0115.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0115.768] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0115.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0115.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0115.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0115.768] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0115.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0115.769] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1
	[0115.769] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0115.769] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0115.769] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="ntldr") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="pagefile.sys") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="ntdetect.com") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="autoexec.bat") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="desktop.ini") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="autorun.inf") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="ntuser.dat") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="iconcache.db") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="bootsect.bak") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="boot.ini") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="bootfont.bin") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="config.sys") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="io.sys") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="msdos.sys") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="ntuser.dat.log") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="thumbs.db") returned 0x0
	[0115.769] StrStrW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="swapfile.sys") returned 0x0
	[0115.769] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0115.770] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=271360) returned 1
	[0115.770] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.770] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0115.779] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0115.779] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.779] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0115.780] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0115.780] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0115.780] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0115.782] GetLastError () returned 0x3e5
	[0115.795] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0115.795] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0
	[0115.795] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0115.795] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0115.795] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0115.795] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0115.795] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0115.795] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c4
	[0115.796] WriteFile (in: hFile=0x3c4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0115.796] CloseHandle (hObject=0x3c4) returned 1
	[0115.797] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0115.797] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0115.797] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0115.797] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0115.797] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc042cd20, ftCreationTime.dwHighDateTime=0x1d5ddff, ftLastAccessTime.dwLowDateTime=0xe1076750, ftLastAccessTime.dwHighDateTime=0x1d5e63d, ftLastWriteTime.dwLowDateTime=0xe1076750, ftLastWriteTime.dwHighDateTime=0x1d5e63d, nFileSizeHigh=0x0, nFileSizeLow=0x16d04, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ou_9PeTleJWmDJh.ppt", cAlternateFileName="OU_9PE~1.PPT")) returned 1
	[0115.797] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0115.797] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0115.797] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="ntldr") returned 0x0
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="pagefile.sys") returned 0x0
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="ntdetect.com") returned 0x0
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="autoexec.bat") returned 0x0
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="desktop.ini") returned 0x0
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="autorun.inf") returned 0x0
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="ntuser.dat") returned 0x0
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="iconcache.db") returned 0x0
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="bootsect.bak") returned 0x0
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="boot.ini") returned 0x0
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="bootfont.bin") returned 0x0
	[0115.797] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="config.sys") returned 0x0
	[0115.798] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="io.sys") returned 0x0
	[0115.798] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="msdos.sys") returned 0x0
	[0115.798] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="ntuser.dat.log") returned 0x0
	[0115.798] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="thumbs.db") returned 0x0
	[0115.798] StrStrW (lpFirst="ou_9petlejwmdjh.ppt", lpSrch="swapfile.sys") returned 0x0
	[0115.798] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ou_9PeTleJWmDJh.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ou_9petlejwmdjh.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0115.798] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=93444) returned 1
	[0115.798] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.798] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0115.813] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0115.813] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.813] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0115.814] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0115.814] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0115.814] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0115.821] GetLastError () returned 0x3e5
	[0115.821] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0115.822] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f64dc0, ftCreationTime.dwHighDateTime=0x1d5da55, ftLastAccessTime.dwLowDateTime=0xf656a120, ftLastAccessTime.dwHighDateTime=0x1d5e37c, ftLastWriteTime.dwLowDateTime=0xf656a120, ftLastWriteTime.dwHighDateTime=0x1d5e37c, nFileSizeHigh=0x0, nFileSizeLow=0x165fe, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OYvHbSxRyDdIlTwvwD5Y.csv", cAlternateFileName="OYVHBS~1.CSV")) returned 1
	[0115.822] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0115.822] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0115.822] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="ntldr") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="pagefile.sys") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="ntdetect.com") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="autoexec.bat") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="desktop.ini") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="autorun.inf") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="ntuser.dat") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="iconcache.db") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="bootsect.bak") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="boot.ini") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="bootfont.bin") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="config.sys") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="io.sys") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="msdos.sys") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="ntuser.dat.log") returned 0x0
	[0115.822] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="thumbs.db") returned 0x0
	[0115.823] StrStrW (lpFirst="oyvhbsxryddiltwvwd5y.csv", lpSrch="swapfile.sys") returned 0x0
	[0115.823] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OYvHbSxRyDdIlTwvwD5Y.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oyvhbsxryddiltwvwd5y.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0115.823] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=91646) returned 1
	[0115.823] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.823] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0115.832] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0115.832] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.832] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0115.833] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0115.833] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0115.833] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.843] GetLastError () returned 0x3e5
	[0115.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0115.843] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80de3a50, ftCreationTime.dwHighDateTime=0x1d5dcd5, ftLastAccessTime.dwLowDateTime=0x601fa7e0, ftLastAccessTime.dwHighDateTime=0x1d5de8d, ftLastWriteTime.dwLowDateTime=0x601fa7e0, ftLastWriteTime.dwHighDateTime=0x1d5de8d, nFileSizeHigh=0x0, nFileSizeLow=0x8cf2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PQD6yoKepl2tUhqv.ots", cAlternateFileName="PQD6YO~1.OTS")) returned 1
	[0115.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0115.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0115.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0115.843] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.843] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="ntldr") returned 0x0
	[0115.843] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="pagefile.sys") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="ntdetect.com") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="autoexec.bat") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="desktop.ini") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="autorun.inf") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="ntuser.dat") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="iconcache.db") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="bootsect.bak") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="boot.ini") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="bootfont.bin") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="config.sys") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="io.sys") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="msdos.sys") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="ntuser.dat.log") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="thumbs.db") returned 0x0
	[0115.844] StrStrW (lpFirst="pqd6yokepl2tuhqv.ots", lpSrch="swapfile.sys") returned 0x0
	[0115.844] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PQD6yoKepl2tUhqv.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pqd6yokepl2tuhqv.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0115.844] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=36082) returned 1
	[0115.844] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.844] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0115.854] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.854] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.855] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0115.855] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0115.855] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0115.855] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.862] GetLastError () returned 0x3e5
	[0115.862] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0115.862] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49caeb80, ftCreationTime.dwHighDateTime=0x1d5df0a, ftLastAccessTime.dwLowDateTime=0x8321dc90, ftLastAccessTime.dwHighDateTime=0x1d587c1, ftLastWriteTime.dwLowDateTime=0x8321dc90, ftLastWriteTime.dwHighDateTime=0x1d587c1, nFileSizeHigh=0x0, nFileSizeLow=0x142c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qt_0Ae0ejm m9J3.xlsx", cAlternateFileName="QT_0AE~1.XLS")) returned 1
	[0115.862] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0115.862] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0115.862] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0115.862] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.862] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="ntldr") returned 0x0
	[0115.862] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="pagefile.sys") returned 0x0
	[0115.862] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="ntdetect.com") returned 0x0
	[0115.862] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="autoexec.bat") returned 0x0
	[0115.862] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="desktop.ini") returned 0x0
	[0115.862] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="autorun.inf") returned 0x0
	[0115.862] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="ntuser.dat") returned 0x0
	[0115.862] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="iconcache.db") returned 0x0
	[0115.862] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="bootsect.bak") returned 0x0
	[0115.863] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="boot.ini") returned 0x0
	[0115.863] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="bootfont.bin") returned 0x0
	[0115.863] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="config.sys") returned 0x0
	[0115.863] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="io.sys") returned 0x0
	[0115.863] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="msdos.sys") returned 0x0
	[0115.863] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="ntuser.dat.log") returned 0x0
	[0115.863] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="thumbs.db") returned 0x0
	[0115.863] StrStrW (lpFirst="qt_0ae0ejm m9j3.xlsx", lpSrch="swapfile.sys") returned 0x0
	[0115.863] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\qt_0Ae0ejm m9J3.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qt_0ae0ejm m9j3.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0115.863] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=82632) returned 1
	[0115.863] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.863] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0115.882] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0115.882] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.882] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0115.883] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0115.883] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0115.883] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.890] GetLastError () returned 0x3e5
	[0115.890] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0115.890] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee10c0, ftCreationTime.dwHighDateTime=0x1d5d60c, ftLastAccessTime.dwLowDateTime=0x4cf9d190, ftLastAccessTime.dwHighDateTime=0x1d5bd0e, ftLastWriteTime.dwLowDateTime=0x4cf9d190, ftLastWriteTime.dwHighDateTime=0x1d5bd0e, nFileSizeHigh=0x0, nFileSizeLow=0x9b93, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uMRDEqKnwX4z.xlsx", cAlternateFileName="UMRDEQ~1.XLS")) returned 1
	[0115.890] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0115.891] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0115.891] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="ntldr") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="pagefile.sys") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="ntdetect.com") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="autoexec.bat") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="desktop.ini") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="autorun.inf") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="ntuser.dat") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="iconcache.db") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="bootsect.bak") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="boot.ini") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="bootfont.bin") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="config.sys") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="io.sys") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="msdos.sys") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="ntuser.dat.log") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="thumbs.db") returned 0x0
	[0115.891] StrStrW (lpFirst="umrdeqknwx4z.xlsx", lpSrch="swapfile.sys") returned 0x0
	[0115.891] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\uMRDEqKnwX4z.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\umrdeqknwx4z.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0115.892] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=39827) returned 1
	[0115.892] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.892] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0115.901] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.901] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.901] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0115.902] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0115.902] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0115.902] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.908] GetLastError () returned 0x3e5
	[0115.908] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0115.908] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe92a8d0, ftCreationTime.dwHighDateTime=0x1d5d8cc, ftLastAccessTime.dwLowDateTime=0xd5d11540, ftLastAccessTime.dwHighDateTime=0x1d5d99d, ftLastWriteTime.dwLowDateTime=0xd5d11540, ftLastWriteTime.dwHighDateTime=0x1d5d99d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wa4DIlfTXL3AOTf05", cAlternateFileName="WA4DIL~1")) returned 1
	[0115.908] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0115.908] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0115.909] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0115.909] lstrcmpW (lpString1="..", lpString2="wa4DIlfTXL3AOTf05") returned -1
	[0115.909] lstrcmpW (lpString1=".", lpString2="wa4DIlfTXL3AOTf05") returned -1
	[0115.909] StrStrW (lpFirst="wa4dilftxl3aotf05", lpSrch="programdata") returned 0x0
	[0115.909] StrStrW (lpFirst="wa4dilftxl3aotf05", lpSrch="$recycle.bin") returned 0x0
	[0115.909] StrStrW (lpFirst="wa4dilftxl3aotf05", lpSrch="program files") returned 0x0
	[0115.909] StrStrW (lpFirst="wa4dilftxl3aotf05", lpSrch="windows") returned 0x0
	[0115.909] StrStrW (lpFirst="wa4dilftxl3aotf05", lpSrch="all users") returned 0x0
	[0115.909] StrStrW (lpFirst="wa4dilftxl3aotf05", lpSrch="winnt") returned 0x0
	[0115.909] StrStrW (lpFirst="wa4dilftxl3aotf05", lpSrch="appdata") returned 0x0
	[0115.909] StrStrW (lpFirst="wa4dilftxl3aotf05", lpSrch="application data") returned 0x0
	[0115.909] StrStrW (lpFirst="wa4dilftxl3aotf05", lpSrch="local settings") returned 0x0
	[0115.909] StrStrW (lpFirst="wa4dilftxl3aotf05", lpSrch="boot") returned 0x0
	[0115.909] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0115.909] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.909] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe92a8d0, ftCreationTime.dwHighDateTime=0x1d5d8cc, ftLastAccessTime.dwLowDateTime=0xd5d11540, ftLastAccessTime.dwHighDateTime=0x1d5d99d, ftLastWriteTime.dwLowDateTime=0xd5d11540, ftLastWriteTime.dwHighDateTime=0x1d5d99d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0115.909] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.909] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.909] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0115.909] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0115.909] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.909] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe92a8d0, ftCreationTime.dwHighDateTime=0x1d5d8cc, ftLastAccessTime.dwLowDateTime=0xd5d11540, ftLastAccessTime.dwHighDateTime=0x1d5d99d, ftLastWriteTime.dwLowDateTime=0xd5d11540, ftLastWriteTime.dwHighDateTime=0x1d5d99d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0115.909] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.909] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0115.909] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.910] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd72fd20, ftCreationTime.dwHighDateTime=0x1d5df38, ftLastAccessTime.dwLowDateTime=0xf406b050, ftLastAccessTime.dwHighDateTime=0x1d5e150, ftLastWriteTime.dwLowDateTime=0xf406b050, ftLastWriteTime.dwHighDateTime=0x1d5e150, nFileSizeHigh=0x0, nFileSizeLow=0xbcf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DqTNceakNegr1Lc6u.odp", cAlternateFileName="DQTNCE~1.ODP")) returned 1
	[0115.910] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.910] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x3517098
	[0115.910] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="ntldr") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="pagefile.sys") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="ntdetect.com") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="autoexec.bat") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="desktop.ini") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="autorun.inf") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="ntuser.dat") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="iconcache.db") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="bootsect.bak") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="boot.ini") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="bootfont.bin") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="config.sys") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="io.sys") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="msdos.sys") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="ntuser.dat.log") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="thumbs.db") returned 0x0
	[0115.910] StrStrW (lpFirst="dqtnceaknegr1lc6u.odp", lpSrch="swapfile.sys") returned 0x0
	[0115.910] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\DqTNceakNegr1Lc6u.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\dqtnceaknegr1lc6u.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0115.910] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=48375) returned 1
	[0115.911] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.911] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0115.920] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0115.920] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.920] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0115.921] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0115.921] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0115.921] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.927] GetLastError () returned 0x3e5
	[0115.927] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0115.927] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb213a20, ftCreationTime.dwHighDateTime=0x1d5d85b, ftLastAccessTime.dwLowDateTime=0x198c04f0, ftLastAccessTime.dwHighDateTime=0x1d5da3b, ftLastWriteTime.dwLowDateTime=0x198c04f0, ftLastWriteTime.dwHighDateTime=0x1d5da3b, nFileSizeHigh=0x0, nFileSizeLow=0xf825, dwReserved0=0x0, dwReserved1=0x0, cFileName="FbTAEINyMadIMg82TCw.docx", cAlternateFileName="FBTAEI~1.DOC")) returned 1
	[0115.927] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.927] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x3517098
	[0115.927] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.927] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.927] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="ntldr") returned 0x0
	[0115.927] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="pagefile.sys") returned 0x0
	[0115.927] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="ntdetect.com") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="autoexec.bat") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="desktop.ini") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="autorun.inf") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="ntuser.dat") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="iconcache.db") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="bootsect.bak") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="boot.ini") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="bootfont.bin") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="config.sys") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="io.sys") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="msdos.sys") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="ntuser.dat.log") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="thumbs.db") returned 0x0
	[0115.928] StrStrW (lpFirst="fbtaeinymadimg82tcw.docx", lpSrch="swapfile.sys") returned 0x0
	[0115.928] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\FbTAEINyMadIMg82TCw.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\fbtaeinymadimg82tcw.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0115.928] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=63525) returned 1
	[0115.928] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.929] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0115.938] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0115.938] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.938] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0115.939] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0115.939] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0115.939] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.951] GetLastError () returned 0x3e5
	[0115.951] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0115.951] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14bdb4d0, ftCreationTime.dwHighDateTime=0x1d5deed, ftLastAccessTime.dwLowDateTime=0x3b06bfa0, ftLastAccessTime.dwHighDateTime=0x1d5d87c, ftLastWriteTime.dwLowDateTime=0x3b06bfa0, ftLastWriteTime.dwHighDateTime=0x1d5d87c, nFileSizeHigh=0x0, nFileSizeLow=0x829, dwReserved0=0x0, dwReserved1=0x0, cFileName="rMK5oPo1Ag.rtf", cAlternateFileName="RMK5OP~1.RTF")) returned 1
	[0115.951] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.951] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0115.951] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.951] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.951] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="ntldr") returned 0x0
	[0115.951] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="pagefile.sys") returned 0x0
	[0115.951] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="ntdetect.com") returned 0x0
	[0115.951] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="autoexec.bat") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="desktop.ini") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="autorun.inf") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="ntuser.dat") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="iconcache.db") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="bootsect.bak") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="boot.ini") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="bootfont.bin") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="config.sys") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="io.sys") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="msdos.sys") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="ntuser.dat.log") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="thumbs.db") returned 0x0
	[0115.952] StrStrW (lpFirst="rmk5opo1ag.rtf", lpSrch="swapfile.sys") returned 0x0
	[0115.952] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\rMK5oPo1Ag.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\rmk5opo1ag.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0115.952] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=2089) returned 1
	[0115.952] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.952] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0115.962] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0115.962] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.962] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0115.963] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0115.963] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0115.963] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.968] GetLastError () returned 0x3e5
	[0115.968] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0115.968] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919026b0, ftCreationTime.dwHighDateTime=0x1d5e306, ftLastAccessTime.dwLowDateTime=0x9ea44720, ftLastAccessTime.dwHighDateTime=0x1d5e6ab, ftLastWriteTime.dwLowDateTime=0x9ea44720, ftLastWriteTime.dwHighDateTime=0x1d5e6ab, nFileSizeHigh=0x0, nFileSizeLow=0x1290e, dwReserved0=0x0, dwReserved1=0x0, cFileName="uOd1E gUA.ots", cAlternateFileName="UOD1EG~1.OTS")) returned 1
	[0115.968] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.968] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0115.968] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.968] StrStrW (lpFirst="uod1e gua.ots", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.968] StrStrW (lpFirst="uod1e gua.ots", lpSrch="ntldr") returned 0x0
	[0115.968] StrStrW (lpFirst="uod1e gua.ots", lpSrch="pagefile.sys") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="ntdetect.com") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="autoexec.bat") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="desktop.ini") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="autorun.inf") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="ntuser.dat") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="iconcache.db") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="bootsect.bak") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="boot.ini") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="bootfont.bin") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="config.sys") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="io.sys") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="msdos.sys") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="ntuser.dat.log") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="thumbs.db") returned 0x0
	[0115.969] StrStrW (lpFirst="uod1e gua.ots", lpSrch="swapfile.sys") returned 0x0
	[0115.969] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\uOd1E gUA.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\uod1e gua.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0115.969] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=76046) returned 1
	[0115.969] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.969] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0115.979] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0115.979] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0115.979] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0115.980] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0115.980] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0115.980] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0115.989] GetLastError () returned 0x3e5
	[0115.989] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0115.989] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeef9c90, ftCreationTime.dwHighDateTime=0x1d5e617, ftLastAccessTime.dwLowDateTime=0xbbed4f30, ftLastAccessTime.dwHighDateTime=0x1d5da9d, ftLastWriteTime.dwLowDateTime=0xbbed4f30, ftLastWriteTime.dwHighDateTime=0x1d5da9d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ypfcybJS", cAlternateFileName="")) returned 1
	[0115.989] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0115.989] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0115.989] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0115.989] lstrcmpW (lpString1="..", lpString2="ypfcybJS") returned -1
	[0115.989] lstrcmpW (lpString1=".", lpString2="ypfcybJS") returned -1
	[0115.989] StrStrW (lpFirst="ypfcybjs", lpSrch="programdata") returned 0x0
	[0115.989] StrStrW (lpFirst="ypfcybjs", lpSrch="$recycle.bin") returned 0x0
	[0115.990] StrStrW (lpFirst="ypfcybjs", lpSrch="program files") returned 0x0
	[0115.990] StrStrW (lpFirst="ypfcybjs", lpSrch="windows") returned 0x0
	[0115.990] StrStrW (lpFirst="ypfcybjs", lpSrch="all users") returned 0x0
	[0115.990] StrStrW (lpFirst="ypfcybjs", lpSrch="winnt") returned 0x0
	[0115.990] StrStrW (lpFirst="ypfcybjs", lpSrch="appdata") returned 0x0
	[0115.990] StrStrW (lpFirst="ypfcybjs", lpSrch="application data") returned 0x0
	[0115.990] StrStrW (lpFirst="ypfcybjs", lpSrch="local settings") returned 0x0
	[0115.990] StrStrW (lpFirst="ypfcybjs", lpSrch="boot") returned 0x0
	[0115.990] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0115.990] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0115.990] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\*", lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeef9c90, ftCreationTime.dwHighDateTime=0x1d5e617, ftLastAccessTime.dwLowDateTime=0xbbed4f30, ftLastAccessTime.dwHighDateTime=0x1d5da9d, ftLastWriteTime.dwLowDateTime=0xbbed4f30, ftLastWriteTime.dwHighDateTime=0x1d5da9d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e950
	[0115.990] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0115.990] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0115.990] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0115.990] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0115.990] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0115.990] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeef9c90, ftCreationTime.dwHighDateTime=0x1d5e617, ftLastAccessTime.dwLowDateTime=0xbbed4f30, ftLastAccessTime.dwHighDateTime=0x1d5da9d, ftLastWriteTime.dwLowDateTime=0xbbed4f30, ftLastWriteTime.dwHighDateTime=0x1d5da9d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0115.990] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0115.990] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0115.990] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0115.990] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfebec00, ftCreationTime.dwHighDateTime=0x1d5d996, ftLastAccessTime.dwLowDateTime=0x706ec500, ftLastAccessTime.dwHighDateTime=0x1d5dc11, ftLastWriteTime.dwLowDateTime=0x706ec500, ftLastWriteTime.dwHighDateTime=0x1d5dc11, nFileSizeHigh=0x0, nFileSizeLow=0x923, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5ymgx3tJCrzT SmyyC.docx", cAlternateFileName="E5YMGX~1.DOC")) returned 1
	[0115.990] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0115.990] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0115.990] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="ntldr") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="pagefile.sys") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="ntdetect.com") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="autoexec.bat") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="desktop.ini") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="autorun.inf") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="ntuser.dat") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="iconcache.db") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="bootsect.bak") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="boot.ini") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="bootfont.bin") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="config.sys") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="io.sys") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="msdos.sys") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="ntuser.dat.log") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="thumbs.db") returned 0x0
	[0115.991] StrStrW (lpFirst="e5ymgx3tjcrzt smyyc.docx", lpSrch="swapfile.sys") returned 0x0
	[0115.991] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\E5ymgx3tJCrzT SmyyC.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\e5ymgx3tjcrzt smyyc.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0115.991] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=2339) returned 1
	[0115.991] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0115.992] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.002] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0116.002] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0116.002] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0116.003] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0116.003] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.003] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.008] GetLastError () returned 0x3e5
	[0116.008] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.008] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb682bbb0, ftCreationTime.dwHighDateTime=0x1d5e197, ftLastAccessTime.dwLowDateTime=0xbb4f33e0, ftLastAccessTime.dwHighDateTime=0x1d5e1c3, ftLastWriteTime.dwLowDateTime=0xbb4f33e0, ftLastWriteTime.dwHighDateTime=0x1d5e1c3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P0V7vZLRf", cAlternateFileName="P0V7VZ~1")) returned 1
	[0116.008] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0116.008] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0116.008] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0116.008] lstrcmpW (lpString1="..", lpString2="P0V7vZLRf") returned -1
	[0116.008] lstrcmpW (lpString1=".", lpString2="P0V7vZLRf") returned -1
	[0116.008] StrStrW (lpFirst="p0v7vzlrf", lpSrch="programdata") returned 0x0
	[0116.008] StrStrW (lpFirst="p0v7vzlrf", lpSrch="$recycle.bin") returned 0x0
	[0116.008] StrStrW (lpFirst="p0v7vzlrf", lpSrch="program files") returned 0x0
	[0116.008] StrStrW (lpFirst="p0v7vzlrf", lpSrch="windows") returned 0x0
	[0116.008] StrStrW (lpFirst="p0v7vzlrf", lpSrch="all users") returned 0x0
	[0116.009] StrStrW (lpFirst="p0v7vzlrf", lpSrch="winnt") returned 0x0
	[0116.009] StrStrW (lpFirst="p0v7vzlrf", lpSrch="appdata") returned 0x0
	[0116.009] StrStrW (lpFirst="p0v7vzlrf", lpSrch="application data") returned 0x0
	[0116.009] StrStrW (lpFirst="p0v7vzlrf", lpSrch="local settings") returned 0x0
	[0116.009] StrStrW (lpFirst="p0v7vzlrf", lpSrch="boot") returned 0x0
	[0116.009] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0116.009] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.009] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\P0V7vZLRf\\*", lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb682bbb0, ftCreationTime.dwHighDateTime=0x1d5e197, ftLastAccessTime.dwLowDateTime=0xbb4f33e0, ftLastAccessTime.dwHighDateTime=0x1d5e1c3, ftLastWriteTime.dwLowDateTime=0xbb4f33e0, ftLastWriteTime.dwHighDateTime=0x1d5e1c3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea50
	[0116.009] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.009] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.009] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0116.009] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0116.009] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.009] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb682bbb0, ftCreationTime.dwHighDateTime=0x1d5e197, ftLastAccessTime.dwLowDateTime=0xbb4f33e0, ftLastAccessTime.dwHighDateTime=0x1d5e1c3, ftLastWriteTime.dwLowDateTime=0xbb4f33e0, ftLastWriteTime.dwHighDateTime=0x1d5e1c3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0116.010] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.010] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0116.010] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.010] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0116.010] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0116.010] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8655fa80, ftCreationTime.dwHighDateTime=0x1d5ddad, ftLastAccessTime.dwLowDateTime=0x3748a3d0, ftLastAccessTime.dwHighDateTime=0x1d5e6ee, ftLastWriteTime.dwLowDateTime=0x3748a3d0, ftLastWriteTime.dwHighDateTime=0x1d5e6ee, nFileSizeHigh=0x0, nFileSizeLow=0x5a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="N7tvAd1fnS3.ots", cAlternateFileName="N7TVAD~1.OTS")) returned 1
	[0116.010] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.010] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0116.010] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="ntldr") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="pagefile.sys") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="ntdetect.com") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="autoexec.bat") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="desktop.ini") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="autorun.inf") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="ntuser.dat") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="iconcache.db") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="bootsect.bak") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="boot.ini") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="bootfont.bin") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="config.sys") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="io.sys") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="msdos.sys") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="ntuser.dat.log") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="thumbs.db") returned 0x0
	[0116.010] StrStrW (lpFirst="n7tvad1fns3.ots", lpSrch="swapfile.sys") returned 0x0
	[0116.011] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\P0V7vZLRf\\N7tvAd1fnS3.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\p0v7vzlrf\\n7tvad1fns3.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0116.011] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=23110) returned 1
	[0116.011] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.011] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.020] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0116.020] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0116.020] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0116.021] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0116.021] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.021] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0116.042] GetLastError () returned 0x3e5
	[0116.042] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0116.042] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8850fb0, ftCreationTime.dwHighDateTime=0x1d5e377, ftLastAccessTime.dwLowDateTime=0x12191ff0, ftLastAccessTime.dwHighDateTime=0x1d5e346, ftLastWriteTime.dwLowDateTime=0x12191ff0, ftLastWriteTime.dwHighDateTime=0x1d5e346, nFileSizeHigh=0x0, nFileSizeLow=0x32c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nkh4_3uh0GOJgz3RyUfq.odp", cAlternateFileName="NKH4_3~1.ODP")) returned 1
	[0116.042] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.042] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0116.042] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.042] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.042] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="ntldr") returned 0x0
	[0116.042] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="pagefile.sys") returned 0x0
	[0116.042] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="ntdetect.com") returned 0x0
	[0116.042] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="autoexec.bat") returned 0x0
	[0116.042] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="desktop.ini") returned 0x0
	[0116.042] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="autorun.inf") returned 0x0
	[0116.042] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="ntuser.dat") returned 0x0
	[0116.042] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="iconcache.db") returned 0x0
	[0116.043] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="bootsect.bak") returned 0x0
	[0116.043] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="boot.ini") returned 0x0
	[0116.043] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="bootfont.bin") returned 0x0
	[0116.043] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="config.sys") returned 0x0
	[0116.043] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="io.sys") returned 0x0
	[0116.043] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="msdos.sys") returned 0x0
	[0116.043] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="ntuser.dat.log") returned 0x0
	[0116.043] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="thumbs.db") returned 0x0
	[0116.043] StrStrW (lpFirst="nkh4_3uh0gojgz3ryufq.odp", lpSrch="swapfile.sys") returned 0x0
	[0116.043] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\P0V7vZLRf\\Nkh4_3uh0GOJgz3RyUfq.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\p0v7vzlrf\\nkh4_3uh0gojgz3ryufq.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0116.043] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=12993) returned 1
	[0116.043] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.043] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0116.056] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.056] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0116.056] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0116.057] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0116.057] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.057] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0116.061] GetLastError () returned 0x3e5
	[0116.061] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0116.061] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8850fb0, ftCreationTime.dwHighDateTime=0x1d5e377, ftLastAccessTime.dwLowDateTime=0x12191ff0, ftLastAccessTime.dwHighDateTime=0x1d5e346, ftLastWriteTime.dwLowDateTime=0x12191ff0, ftLastWriteTime.dwHighDateTime=0x1d5e346, nFileSizeHigh=0x0, nFileSizeLow=0x32c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="nkh4_3uh0gojgz3ryufq.odp", cAlternateFileName="NKH4_3~1.ODP")) returned 0
	[0116.062] FindClose (in: hFindFile=0x61ea50 | out: hFindFile=0x61ea50) returned 1
	[0116.062] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0116.062] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.062] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0116.062] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.062] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\P0V7vZLRf\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\p0v7vzlrf\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0116.071] WriteFile (in: hFile=0x3e0, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e1e4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e1e4*=0x512, lpOverlapped=0x0) returned 1
	[0116.074] CloseHandle (hObject=0x3e0) returned 1
	[0116.074] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0116.074] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0116.074] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0116.074] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.074] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92074b30, ftCreationTime.dwHighDateTime=0x1d5dd63, ftLastAccessTime.dwLowDateTime=0x9cce6080, ftLastAccessTime.dwHighDateTime=0x1d5dda9, ftLastWriteTime.dwLowDateTime=0x9cce6080, ftLastWriteTime.dwHighDateTime=0x1d5dda9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uIJewY frVZX9wY0Z2z2", cAlternateFileName="UIJEWY~1")) returned 1
	[0116.075] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0116.075] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0116.075] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0116.075] lstrcmpW (lpString1="..", lpString2="uIJewY frVZX9wY0Z2z2") returned -1
	[0116.075] lstrcmpW (lpString1=".", lpString2="uIJewY frVZX9wY0Z2z2") returned -1
	[0116.075] StrStrW (lpFirst="uijewy frvzx9wy0z2z2", lpSrch="programdata") returned 0x0
	[0116.075] StrStrW (lpFirst="uijewy frvzx9wy0z2z2", lpSrch="$recycle.bin") returned 0x0
	[0116.075] StrStrW (lpFirst="uijewy frvzx9wy0z2z2", lpSrch="program files") returned 0x0
	[0116.075] StrStrW (lpFirst="uijewy frvzx9wy0z2z2", lpSrch="windows") returned 0x0
	[0116.075] StrStrW (lpFirst="uijewy frvzx9wy0z2z2", lpSrch="all users") returned 0x0
	[0116.075] StrStrW (lpFirst="uijewy frvzx9wy0z2z2", lpSrch="winnt") returned 0x0
	[0116.075] StrStrW (lpFirst="uijewy frvzx9wy0z2z2", lpSrch="appdata") returned 0x0
	[0116.075] StrStrW (lpFirst="uijewy frvzx9wy0z2z2", lpSrch="application data") returned 0x0
	[0116.075] StrStrW (lpFirst="uijewy frvzx9wy0z2z2", lpSrch="local settings") returned 0x0
	[0116.075] StrStrW (lpFirst="uijewy frvzx9wy0z2z2", lpSrch="boot") returned 0x0
	[0116.075] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0116.075] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40402b8
	[0116.075] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\*", lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92074b30, ftCreationTime.dwHighDateTime=0x1d5dd63, ftLastAccessTime.dwLowDateTime=0x9cce6080, ftLastAccessTime.dwHighDateTime=0x1d5dda9, ftLastWriteTime.dwLowDateTime=0x9cce6080, ftLastWriteTime.dwHighDateTime=0x1d5dda9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea50
	[0116.076] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40402b8 | out: hHeap=0x5f0000) returned 1
	[0116.076] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40402b8
	[0116.076] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0116.076] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0116.076] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40402b8 | out: hHeap=0x5f0000) returned 1
	[0116.076] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92074b30, ftCreationTime.dwHighDateTime=0x1d5dd63, ftLastAccessTime.dwLowDateTime=0x9cce6080, ftLastAccessTime.dwHighDateTime=0x1d5dda9, ftLastWriteTime.dwLowDateTime=0x9cce6080, ftLastWriteTime.dwHighDateTime=0x1d5dda9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0116.076] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40402b8
	[0116.076] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0116.076] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40402b8 | out: hHeap=0x5f0000) returned 1
	[0116.076] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80741b00, ftCreationTime.dwHighDateTime=0x1d5e100, ftLastAccessTime.dwLowDateTime=0x2a096d60, ftLastAccessTime.dwHighDateTime=0x1d5e128, ftLastWriteTime.dwLowDateTime=0x2a096d60, ftLastWriteTime.dwHighDateTime=0x1d5e128, nFileSizeHigh=0x0, nFileSizeLow=0x3efe, dwReserved0=0x0, dwReserved1=0x0, cFileName="9D-iv3fHhbTTfXhKSL-D.pptx", cAlternateFileName="9D-IV3~1.PPT")) returned 1
	[0116.076] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40402b8
	[0116.076] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x672e08
	[0116.076] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40402b8 | out: hHeap=0x5f0000) returned 1
	[0116.076] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.076] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="ntldr") returned 0x0
	[0116.076] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="pagefile.sys") returned 0x0
	[0116.076] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="ntdetect.com") returned 0x0
	[0116.076] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="autoexec.bat") returned 0x0
	[0116.076] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="desktop.ini") returned 0x0
	[0116.076] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="autorun.inf") returned 0x0
	[0116.077] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="ntuser.dat") returned 0x0
	[0116.077] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="iconcache.db") returned 0x0
	[0116.077] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="bootsect.bak") returned 0x0
	[0116.077] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="boot.ini") returned 0x0
	[0116.077] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="bootfont.bin") returned 0x0
	[0116.077] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="config.sys") returned 0x0
	[0116.077] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="io.sys") returned 0x0
	[0116.077] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="msdos.sys") returned 0x0
	[0116.077] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.077] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="thumbs.db") returned 0x0
	[0116.077] StrStrW (lpFirst="9d-iv3fhhbttfxhksl-d.pptx", lpSrch="swapfile.sys") returned 0x0
	[0116.077] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\9D-iv3fHhbTTfXhKSL-D.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\9d-iv3fhhbttfxhksl-d.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e4
	[0116.077] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=16126) returned 1
	[0116.077] CreateIoCompletionPort (FileHandle=0x3e4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.077] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.090] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x35166c0
	[0116.090] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cff8
	[0116.090] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0116.091] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0116.091] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.091] ReadFile (in: hFile=0x3e4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0116.092] GetLastError () returned 0x3e5
	[0116.092] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672e08 | out: hHeap=0x5f0000) returned 1
	[0116.092] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95e51130, ftCreationTime.dwHighDateTime=0x1d5e5e0, ftLastAccessTime.dwLowDateTime=0x1ae69010, ftLastAccessTime.dwHighDateTime=0x1d5d7c3, ftLastWriteTime.dwLowDateTime=0x1ae69010, ftLastWriteTime.dwHighDateTime=0x1d5d7c3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AA7WI-0ERcyU", cAlternateFileName="AA7WI-~1")) returned 1
	[0116.092] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40402b8
	[0116.092] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x672e08
	[0116.092] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40402b8 | out: hHeap=0x5f0000) returned 1
	[0116.092] lstrcmpW (lpString1="..", lpString2="AA7WI-0ERcyU") returned -1
	[0116.092] lstrcmpW (lpString1=".", lpString2="AA7WI-0ERcyU") returned -1
	[0116.092] StrStrW (lpFirst="aa7wi-0ercyu", lpSrch="programdata") returned 0x0
	[0116.092] StrStrW (lpFirst="aa7wi-0ercyu", lpSrch="$recycle.bin") returned 0x0
	[0116.092] StrStrW (lpFirst="aa7wi-0ercyu", lpSrch="program files") returned 0x0
	[0116.092] StrStrW (lpFirst="aa7wi-0ercyu", lpSrch="windows") returned 0x0
	[0116.093] StrStrW (lpFirst="aa7wi-0ercyu", lpSrch="all users") returned 0x0
	[0116.093] StrStrW (lpFirst="aa7wi-0ercyu", lpSrch="winnt") returned 0x0
	[0116.093] StrStrW (lpFirst="aa7wi-0ercyu", lpSrch="appdata") returned 0x0
	[0116.093] StrStrW (lpFirst="aa7wi-0ercyu", lpSrch="application data") returned 0x0
	[0116.093] StrStrW (lpFirst="aa7wi-0ercyu", lpSrch="local settings") returned 0x0
	[0116.093] StrStrW (lpFirst="aa7wi-0ercyu", lpSrch="boot") returned 0x0
	[0116.093] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.093] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x4043068
	[0116.093] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\AA7WI-0ERcyU\\*", lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95e51130, ftCreationTime.dwHighDateTime=0x1d5e5e0, ftLastAccessTime.dwLowDateTime=0x1ae69010, ftLastAccessTime.dwHighDateTime=0x1d5d7c3, ftLastWriteTime.dwLowDateTime=0x1ae69010, ftLastWriteTime.dwHighDateTime=0x1d5d7c3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61eb90
	[0116.093] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043068 | out: hHeap=0x5f0000) returned 1
	[0116.093] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x4043068
	[0116.093] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0116.093] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0116.093] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043068 | out: hHeap=0x5f0000) returned 1
	[0116.093] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95e51130, ftCreationTime.dwHighDateTime=0x1d5e5e0, ftLastAccessTime.dwLowDateTime=0x1ae69010, ftLastAccessTime.dwHighDateTime=0x1d5d7c3, ftLastWriteTime.dwLowDateTime=0x1ae69010, ftLastWriteTime.dwHighDateTime=0x1d5d7c3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0116.094] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x4043068
	[0116.094] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x136) returned 0x4081c98
	[0116.094] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043068 | out: hHeap=0x5f0000) returned 1
	[0116.094] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0116.094] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081c98 | out: hHeap=0x5f0000) returned 1
	[0116.094] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9629ae0, ftCreationTime.dwHighDateTime=0x1d5d917, ftLastAccessTime.dwLowDateTime=0xcfeb700, ftLastAccessTime.dwHighDateTime=0x1d5db94, ftLastWriteTime.dwLowDateTime=0xcfeb700, ftLastWriteTime.dwHighDateTime=0x1d5db94, nFileSizeHigh=0x0, nFileSizeLow=0xa38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HCTa6b8Pyb.docx", cAlternateFileName="HCTA6B~1.DOC")) returned 1
	[0116.094] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x4043068
	[0116.094] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x136) returned 0x4081c98
	[0116.094] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043068 | out: hHeap=0x5f0000) returned 1
	[0116.094] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.094] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="ntldr") returned 0x0
	[0116.094] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="pagefile.sys") returned 0x0
	[0116.094] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="ntdetect.com") returned 0x0
	[0116.094] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="autoexec.bat") returned 0x0
	[0116.094] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="desktop.ini") returned 0x0
	[0116.094] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="autorun.inf") returned 0x0
	[0116.094] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="ntuser.dat") returned 0x0
	[0116.094] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="iconcache.db") returned 0x0
	[0116.095] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="bootsect.bak") returned 0x0
	[0116.095] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="boot.ini") returned 0x0
	[0116.095] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="bootfont.bin") returned 0x0
	[0116.095] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="config.sys") returned 0x0
	[0116.095] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="io.sys") returned 0x0
	[0116.095] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="msdos.sys") returned 0x0
	[0116.095] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.095] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="thumbs.db") returned 0x0
	[0116.095] StrStrW (lpFirst="hcta6b8pyb.docx", lpSrch="swapfile.sys") returned 0x0
	[0116.095] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\AA7WI-0ERcyU\\HCTa6b8Pyb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\aa7wi-0ercyu\\hcta6b8pyb.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3f4
	[0116.095] GetFileSizeEx (in: hFile=0x3f4, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=41869) returned 1
	[0116.095] CreateIoCompletionPort (FileHandle=0x3f4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.095] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0116.109] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x4081dd8
	[0116.109] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d508
	[0116.109] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0116.110] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0116.110] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.110] ReadFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.126] GetLastError () returned 0x3e5
	[0116.126] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081c98 | out: hHeap=0x5f0000) returned 1
	[0116.126] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7514ff0, ftCreationTime.dwHighDateTime=0x1d5d819, ftLastAccessTime.dwLowDateTime=0x72f00b90, ftLastAccessTime.dwHighDateTime=0x1d5e099, ftLastWriteTime.dwLowDateTime=0x72f00b90, ftLastWriteTime.dwHighDateTime=0x1d5e099, nFileSizeHigh=0x0, nFileSizeLow=0xe6d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="HJWs1YBHxBPTQCHH2Q.odp", cAlternateFileName="HJWS1Y~1.ODP")) returned 1
	[0116.126] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0116.126] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x136) returned 0x351fec8
	[0116.126] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0116.126] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.126] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="ntldr") returned 0x0
	[0116.126] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="pagefile.sys") returned 0x0
	[0116.126] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="ntdetect.com") returned 0x0
	[0116.126] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="autoexec.bat") returned 0x0
	[0116.126] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="desktop.ini") returned 0x0
	[0116.126] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="autorun.inf") returned 0x0
	[0116.126] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="ntuser.dat") returned 0x0
	[0116.127] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="iconcache.db") returned 0x0
	[0116.127] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="bootsect.bak") returned 0x0
	[0116.127] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="boot.ini") returned 0x0
	[0116.127] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="bootfont.bin") returned 0x0
	[0116.127] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="config.sys") returned 0x0
	[0116.127] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="io.sys") returned 0x0
	[0116.127] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="msdos.sys") returned 0x0
	[0116.127] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="ntuser.dat.log") returned 0x0
	[0116.127] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="thumbs.db") returned 0x0
	[0116.127] StrStrW (lpFirst="hjws1ybhxbptqchh2q.odp", lpSrch="swapfile.sys") returned 0x0
	[0116.127] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\AA7WI-0ERcyU\\HJWs1YBHxBPTQCHH2Q.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\aa7wi-0ercyu\\hjws1ybhxbptqchh2q.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0116.127] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=59095) returned 1
	[0116.127] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.127] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0116.140] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x351cdd0
	[0116.140] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0116.140] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0116.141] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0116.141] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.141] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0116.142] GetLastError () returned 0x3e5
	[0116.142] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0116.142] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8598470, ftCreationTime.dwHighDateTime=0x1d5dd38, ftLastAccessTime.dwLowDateTime=0x6205ba00, ftLastAccessTime.dwHighDateTime=0x1d5dced, ftLastWriteTime.dwLowDateTime=0x6205ba00, ftLastWriteTime.dwHighDateTime=0x1d5dced, nFileSizeHigh=0x0, nFileSizeLow=0x11e5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="teMc0mMGPk.pdf", cAlternateFileName="TEMC0M~1.PDF")) returned 1
	[0116.142] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0116.143] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x136) returned 0x672ca0
	[0116.143] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="ntldr") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="pagefile.sys") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="ntdetect.com") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="autoexec.bat") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="desktop.ini") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="autorun.inf") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="ntuser.dat") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="iconcache.db") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="bootsect.bak") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="boot.ini") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="bootfont.bin") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="config.sys") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="io.sys") returned 0x0
	[0116.143] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="msdos.sys") returned 0x0
	[0116.144] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="ntuser.dat.log") returned 0x0
	[0116.144] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="thumbs.db") returned 0x0
	[0116.144] StrStrW (lpFirst="temc0mmgpk.pdf", lpSrch="swapfile.sys") returned 0x0
	[0116.144] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\AA7WI-0ERcyU\\teMc0mMGPk.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\aa7wi-0ercyu\\temc0mmgpk.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0116.144] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=73307) returned 1
	[0116.144] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.144] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0116.157] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351ced8
	[0116.157] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d508
	[0116.157] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0116.158] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0116.158] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.159] ReadFile (in: hFile=0x3dc, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0116.168] GetLastError () returned 0x3e5
	[0116.168] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672ca0 | out: hHeap=0x5f0000) returned 1
	[0116.168] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8598470, ftCreationTime.dwHighDateTime=0x1d5dd38, ftLastAccessTime.dwLowDateTime=0x6205ba00, ftLastAccessTime.dwHighDateTime=0x1d5dced, ftLastWriteTime.dwLowDateTime=0x6205ba00, ftLastWriteTime.dwHighDateTime=0x1d5dced, nFileSizeHigh=0x0, nFileSizeLow=0x11e5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="temc0mmgpk.pdf", cAlternateFileName="TEMC0M~1.PDF")) returned 0
	[0116.168] FindClose (in: hFindFile=0x61eb90 | out: hFindFile=0x61eb90) returned 1
	[0116.169] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0116.169] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0116.169] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x136) returned 0x672ca0
	[0116.169] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0116.169] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\AA7WI-0ERcyU\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\aa7wi-0ercyu\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0116.169] WriteFile (in: hFile=0x3ec, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6deb4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6deb4*=0x512, lpOverlapped=0x0) returned 1
	[0116.170] CloseHandle (hObject=0x3ec) returned 1
	[0116.171] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672ca0 | out: hHeap=0x5f0000) returned 1
	[0116.171] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0116.171] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.171] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672e08 | out: hHeap=0x5f0000) returned 1
	[0116.171] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x396115b0, ftCreationTime.dwHighDateTime=0x1d5e11e, ftLastAccessTime.dwLowDateTime=0x99ae13c0, ftLastAccessTime.dwHighDateTime=0x1d5e185, ftLastWriteTime.dwLowDateTime=0x99ae13c0, ftLastWriteTime.dwHighDateTime=0x1d5e185, nFileSizeHigh=0x0, nFileSizeLow=0xfded, dwReserved0=0x0, dwReserved1=0x0, cFileName="Db1CWzTR.pdf", cAlternateFileName="")) returned 1
	[0116.171] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0116.171] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x351fec8
	[0116.171] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0116.171] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.171] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="ntldr") returned 0x0
	[0116.171] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="pagefile.sys") returned 0x0
	[0116.171] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="ntdetect.com") returned 0x0
	[0116.171] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="autoexec.bat") returned 0x0
	[0116.171] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="desktop.ini") returned 0x0
	[0116.171] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="autorun.inf") returned 0x0
	[0116.171] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="ntuser.dat") returned 0x0
	[0116.172] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="iconcache.db") returned 0x0
	[0116.172] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="bootsect.bak") returned 0x0
	[0116.172] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="boot.ini") returned 0x0
	[0116.172] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="bootfont.bin") returned 0x0
	[0116.172] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="config.sys") returned 0x0
	[0116.172] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="io.sys") returned 0x0
	[0116.172] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="msdos.sys") returned 0x0
	[0116.172] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="ntuser.dat.log") returned 0x0
	[0116.172] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="thumbs.db") returned 0x0
	[0116.172] StrStrW (lpFirst="db1cwztr.pdf", lpSrch="swapfile.sys") returned 0x0
	[0116.172] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\Db1CWzTR.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\db1cwztr.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0116.172] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=65005) returned 1
	[0116.172] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.173] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0116.186] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.186] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d508
	[0116.186] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0116.187] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0116.187] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.187] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0116.195] GetLastError () returned 0x3e5
	[0116.195] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0116.195] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3112a10, ftCreationTime.dwHighDateTime=0x1d5e73a, ftLastAccessTime.dwLowDateTime=0xdb2a1830, ftLastAccessTime.dwHighDateTime=0x1d5e60d, ftLastWriteTime.dwLowDateTime=0xdb2a1830, ftLastWriteTime.dwHighDateTime=0x1d5e60d, nFileSizeHigh=0x0, nFileSizeLow=0xc9bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbCtz-.xlsx", cAlternateFileName="YBCTZ-~1.XLS")) returned 1
	[0116.195] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0116.196] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x351fec8
	[0116.196] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0116.196] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.196] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="ntldr") returned 0x0
	[0116.196] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="pagefile.sys") returned 0x0
	[0116.196] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="ntdetect.com") returned 0x0
	[0116.196] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="autoexec.bat") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="desktop.ini") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="autorun.inf") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="ntuser.dat") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="iconcache.db") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="bootsect.bak") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="boot.ini") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="bootfont.bin") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="config.sys") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="io.sys") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="msdos.sys") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="thumbs.db") returned 0x0
	[0116.197] StrStrW (lpFirst="ybctz-.xlsx", lpSrch="swapfile.sys") returned 0x0
	[0116.197] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\YbCtz-.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\ybctz-.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0116.198] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=51643) returned 1
	[0116.198] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.198] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0116.211] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0116.211] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d508
	[0116.211] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0116.212] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0116.212] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.212] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0116.220] GetLastError () returned 0x3e5
	[0116.220] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0116.220] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3112a10, ftCreationTime.dwHighDateTime=0x1d5e73a, ftLastAccessTime.dwLowDateTime=0xdb2a1830, ftLastAccessTime.dwHighDateTime=0x1d5e60d, ftLastWriteTime.dwLowDateTime=0xdb2a1830, ftLastWriteTime.dwHighDateTime=0x1d5e60d, nFileSizeHigh=0x0, nFileSizeLow=0xc9bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ybctz-.xlsx", cAlternateFileName="YBCTZ-~1.XLS")) returned 0
	[0116.221] FindClose (in: hFindFile=0x61ea50 | out: hFindFile=0x61ea50) returned 1
	[0116.221] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0116.221] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0116.221] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x351fec8
	[0116.221] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0116.221] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\uIJewY frVZX9wY0Z2z2\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\uijewy frvzx9wy0z2z2\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0116.221] WriteFile (in: hFile=0x3e0, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e1e4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e1e4*=0x512, lpOverlapped=0x0) returned 1
	[0116.222] CloseHandle (hObject=0x3e0) returned 1
	[0116.223] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0116.223] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0116.223] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40401f0 | out: hHeap=0x5f0000) returned 1
	[0116.223] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.223] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd411f580, ftCreationTime.dwHighDateTime=0x1d5e695, ftLastAccessTime.dwLowDateTime=0xe969e540, ftLastAccessTime.dwHighDateTime=0x1d5da39, ftLastWriteTime.dwLowDateTime=0xe969e540, ftLastWriteTime.dwHighDateTime=0x1d5da39, nFileSizeHigh=0x0, nFileSizeLow=0x10157, dwReserved0=0x0, dwReserved1=0x0, cFileName="wilBO-ZHaF.rtf", cAlternateFileName="WILBO-~1.RTF")) returned 1
	[0116.223] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0116.223] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x35167b8
	[0116.223] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0116.223] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.223] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="ntldr") returned 0x0
	[0116.223] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="pagefile.sys") returned 0x0
	[0116.223] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="ntdetect.com") returned 0x0
	[0116.223] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="autoexec.bat") returned 0x0
	[0116.223] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="desktop.ini") returned 0x0
	[0116.223] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="autorun.inf") returned 0x0
	[0116.223] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="ntuser.dat") returned 0x0
	[0116.223] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="iconcache.db") returned 0x0
	[0116.224] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="bootsect.bak") returned 0x0
	[0116.224] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="boot.ini") returned 0x0
	[0116.224] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="bootfont.bin") returned 0x0
	[0116.224] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="config.sys") returned 0x0
	[0116.224] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="io.sys") returned 0x0
	[0116.224] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="msdos.sys") returned 0x0
	[0116.224] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="ntuser.dat.log") returned 0x0
	[0116.224] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="thumbs.db") returned 0x0
	[0116.224] StrStrW (lpFirst="wilbo-zhaf.rtf", lpSrch="swapfile.sys") returned 0x0
	[0116.224] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\wilBO-ZHaF.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\wilbo-zhaf.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0116.224] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=65879) returned 1
	[0116.224] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.224] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0116.238] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0116.238] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d508
	[0116.238] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0116.239] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0116.239] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.239] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0116.246] GetLastError () returned 0x3e5
	[0116.246] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35167b8 | out: hHeap=0x5f0000) returned 1
	[0116.246] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd21cd3e0, ftCreationTime.dwHighDateTime=0x1d5e432, ftLastAccessTime.dwLowDateTime=0xd0491470, ftLastAccessTime.dwHighDateTime=0x1d5e5d6, ftLastWriteTime.dwLowDateTime=0xd0491470, ftLastWriteTime.dwHighDateTime=0x1d5e5d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_8SJtLW", cAlternateFileName="")) returned 1
	[0116.246] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0116.246] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x35167b8
	[0116.246] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0116.247] lstrcmpW (lpString1="..", lpString2="_8SJtLW") returned -1
	[0116.247] lstrcmpW (lpString1=".", lpString2="_8SJtLW") returned -1
	[0116.247] StrStrW (lpFirst="_8sjtlw", lpSrch="programdata") returned 0x0
	[0116.247] StrStrW (lpFirst="_8sjtlw", lpSrch="$recycle.bin") returned 0x0
	[0116.247] StrStrW (lpFirst="_8sjtlw", lpSrch="program files") returned 0x0
	[0116.247] StrStrW (lpFirst="_8sjtlw", lpSrch="windows") returned 0x0
	[0116.247] StrStrW (lpFirst="_8sjtlw", lpSrch="all users") returned 0x0
	[0116.247] StrStrW (lpFirst="_8sjtlw", lpSrch="winnt") returned 0x0
	[0116.247] StrStrW (lpFirst="_8sjtlw", lpSrch="appdata") returned 0x0
	[0116.247] StrStrW (lpFirst="_8sjtlw", lpSrch="application data") returned 0x0
	[0116.247] StrStrW (lpFirst="_8sjtlw", lpSrch="local settings") returned 0x0
	[0116.247] StrStrW (lpFirst="_8sjtlw", lpSrch="boot") returned 0x0
	[0116.247] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0116.247] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.247] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\*", lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd21cd3e0, ftCreationTime.dwHighDateTime=0x1d5e432, ftLastAccessTime.dwLowDateTime=0xd0491470, ftLastAccessTime.dwHighDateTime=0x1d5e5d6, ftLastWriteTime.dwLowDateTime=0xd0491470, ftLastWriteTime.dwHighDateTime=0x1d5e5d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea50
	[0116.247] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.247] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.247] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0116.247] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0116.247] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.247] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd21cd3e0, ftCreationTime.dwHighDateTime=0x1d5e432, ftLastAccessTime.dwLowDateTime=0xd0491470, ftLastAccessTime.dwHighDateTime=0x1d5e5d6, ftLastWriteTime.dwLowDateTime=0xd0491470, ftLastWriteTime.dwHighDateTime=0x1d5e5d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0116.247] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.248] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0116.248] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.248] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b47020, ftCreationTime.dwHighDateTime=0x1d5e1e2, ftLastAccessTime.dwLowDateTime=0xea7872c0, ftLastAccessTime.dwHighDateTime=0x1d5dde1, ftLastWriteTime.dwLowDateTime=0xea7872c0, ftLastWriteTime.dwHighDateTime=0x1d5dde1, nFileSizeHigh=0x0, nFileSizeLow=0x1227, dwReserved0=0x0, dwReserved1=0x0, cFileName="4Vpbqavm_yuJ jhRY.pptx", cAlternateFileName="4VPBQA~1.PPT")) returned 1
	[0116.248] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.248] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x351ced8
	[0116.248] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="ntldr") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="pagefile.sys") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="ntdetect.com") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="autoexec.bat") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="desktop.ini") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="autorun.inf") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="ntuser.dat") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="iconcache.db") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="bootsect.bak") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="boot.ini") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="bootfont.bin") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="config.sys") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="io.sys") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="msdos.sys") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.248] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="thumbs.db") returned 0x0
	[0116.249] StrStrW (lpFirst="4vpbqavm_yuj jhry.pptx", lpSrch="swapfile.sys") returned 0x0
	[0116.249] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\4Vpbqavm_yuJ jhRY.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\4vpbqavm_yuj jhry.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0116.249] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=4647) returned 1
	[0116.249] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.249] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0116.272] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.272] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0116.272] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0116.274] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0116.274] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.274] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0
	[0116.281] GetLastError () returned 0x3e5
	[0116.281] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ced8 | out: hHeap=0x5f0000) returned 1
	[0116.281] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297eca30, ftCreationTime.dwHighDateTime=0x1d5ddb2, ftLastAccessTime.dwLowDateTime=0xbed8cf30, ftLastAccessTime.dwHighDateTime=0x1d5d854, ftLastWriteTime.dwLowDateTime=0xbed8cf30, ftLastWriteTime.dwHighDateTime=0x1d5d854, nFileSizeHigh=0x0, nFileSizeLow=0x48dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="8BrStyEzQnzfF9.xlsx", cAlternateFileName="8BRSTY~1.XLS")) returned 1
	[0116.281] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.281] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0116.281] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.281] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.281] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="ntldr") returned 0x0
	[0116.281] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="pagefile.sys") returned 0x0
	[0116.281] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="ntdetect.com") returned 0x0
	[0116.281] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="autoexec.bat") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="desktop.ini") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="autorun.inf") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="ntuser.dat") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="iconcache.db") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="bootsect.bak") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="boot.ini") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="bootfont.bin") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="config.sys") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="io.sys") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="msdos.sys") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="thumbs.db") returned 0x0
	[0116.282] StrStrW (lpFirst="8brstyezqnzff9.xlsx", lpSrch="swapfile.sys") returned 0x0
	[0116.282] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\8BrStyEzQnzfF9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\8brstyezqnzff9.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0116.282] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=18653) returned 1
	[0116.283] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.283] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.296] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0116.296] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0116.296] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0116.297] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0116.297] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.297] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.305] GetLastError () returned 0x3e5
	[0116.305] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0116.305] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdeddf430, ftCreationTime.dwHighDateTime=0x1d5e1f6, ftLastAccessTime.dwLowDateTime=0x5b508340, ftLastAccessTime.dwHighDateTime=0x1d5da11, ftLastWriteTime.dwLowDateTime=0x5b508340, ftLastWriteTime.dwHighDateTime=0x1d5da11, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="b3-Xp23y2tCQVfIgfUz-", cAlternateFileName="B3-XP2~1")) returned 1
	[0116.305] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.305] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0116.305] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.305] lstrcmpW (lpString1="..", lpString2="b3-Xp23y2tCQVfIgfUz-") returned -1
	[0116.305] lstrcmpW (lpString1=".", lpString2="b3-Xp23y2tCQVfIgfUz-") returned -1
	[0116.305] StrStrW (lpFirst="b3-xp23y2tcqvfigfuz-", lpSrch="programdata") returned 0x0
	[0116.305] StrStrW (lpFirst="b3-xp23y2tcqvfigfuz-", lpSrch="$recycle.bin") returned 0x0
	[0116.305] StrStrW (lpFirst="b3-xp23y2tcqvfigfuz-", lpSrch="program files") returned 0x0
	[0116.305] StrStrW (lpFirst="b3-xp23y2tcqvfigfuz-", lpSrch="windows") returned 0x0
	[0116.305] StrStrW (lpFirst="b3-xp23y2tcqvfigfuz-", lpSrch="all users") returned 0x0
	[0116.305] StrStrW (lpFirst="b3-xp23y2tcqvfigfuz-", lpSrch="winnt") returned 0x0
	[0116.306] StrStrW (lpFirst="b3-xp23y2tcqvfigfuz-", lpSrch="appdata") returned 0x0
	[0116.306] StrStrW (lpFirst="b3-xp23y2tcqvfigfuz-", lpSrch="application data") returned 0x0
	[0116.306] StrStrW (lpFirst="b3-xp23y2tcqvfigfuz-", lpSrch="local settings") returned 0x0
	[0116.306] StrStrW (lpFirst="b3-xp23y2tcqvfigfuz-", lpSrch="boot") returned 0x0
	[0116.306] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0116.306] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.306] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\*", lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdeddf430, ftCreationTime.dwHighDateTime=0x1d5e1f6, ftLastAccessTime.dwLowDateTime=0x5b508340, ftLastAccessTime.dwHighDateTime=0x1d5da11, ftLastWriteTime.dwLowDateTime=0x5b508340, ftLastWriteTime.dwHighDateTime=0x1d5da11, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61eb90
	[0116.306] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.306] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.306] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0116.306] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0116.306] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.306] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdeddf430, ftCreationTime.dwHighDateTime=0x1d5e1f6, ftLastAccessTime.dwLowDateTime=0x5b508340, ftLastAccessTime.dwHighDateTime=0x1d5da11, ftLastWriteTime.dwLowDateTime=0x5b508340, ftLastWriteTime.dwHighDateTime=0x1d5da11, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0116.306] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.306] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0116.306] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.306] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x805ea670, ftCreationTime.dwHighDateTime=0x1d5e49e, ftLastAccessTime.dwLowDateTime=0xd83718b0, ftLastAccessTime.dwHighDateTime=0x1d5df43, ftLastWriteTime.dwLowDateTime=0xd83718b0, ftLastWriteTime.dwHighDateTime=0x1d5df43, nFileSizeHigh=0x0, nFileSizeLow=0x8e75, dwReserved0=0x0, dwReserved1=0x0, cFileName="2-LkXdR3QAQc.ods", cAlternateFileName="2-LKXD~1.ODS")) returned 1
	[0116.307] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.307] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x136) returned 0x40819f8
	[0116.307] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="ntldr") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="pagefile.sys") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="ntdetect.com") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="autoexec.bat") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="desktop.ini") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="autorun.inf") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="ntuser.dat") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="iconcache.db") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="bootsect.bak") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="boot.ini") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="bootfont.bin") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="config.sys") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="io.sys") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="msdos.sys") returned 0x0
	[0116.307] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="ntuser.dat.log") returned 0x0
	[0116.308] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="thumbs.db") returned 0x0
	[0116.308] StrStrW (lpFirst="2-lkxdr3qaqc.ods", lpSrch="swapfile.sys") returned 0x0
	[0116.308] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\2-LkXdR3QAQc.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\2-lkxdr3qaqc.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0116.308] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=36469) returned 1
	[0116.308] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.308] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.349] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0116.349] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0116.349] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0116.350] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0116.350] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.350] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.360] GetLastError () returned 0x3e5
	[0116.360] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.361] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71f77320, ftCreationTime.dwHighDateTime=0x1d5e13b, ftLastAccessTime.dwLowDateTime=0x1e0e5ac0, ftLastAccessTime.dwHighDateTime=0x1d5df07, ftLastWriteTime.dwLowDateTime=0x1e0e5ac0, ftLastWriteTime.dwHighDateTime=0x1d5df07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5m0DQrr1Haz408KCThqf", cAlternateFileName="5M0DQR~1")) returned 1
	[0116.361] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.361] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x136) returned 0x40819f8
	[0116.361] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.361] lstrcmpW (lpString1="..", lpString2="5m0DQrr1Haz408KCThqf") returned -1
	[0116.361] lstrcmpW (lpString1=".", lpString2="5m0DQrr1Haz408KCThqf") returned -1
	[0116.361] StrStrW (lpFirst="5m0dqrr1haz408kcthqf", lpSrch="programdata") returned 0x0
	[0116.361] StrStrW (lpFirst="5m0dqrr1haz408kcthqf", lpSrch="$recycle.bin") returned 0x0
	[0116.361] StrStrW (lpFirst="5m0dqrr1haz408kcthqf", lpSrch="program files") returned 0x0
	[0116.361] StrStrW (lpFirst="5m0dqrr1haz408kcthqf", lpSrch="windows") returned 0x0
	[0116.361] StrStrW (lpFirst="5m0dqrr1haz408kcthqf", lpSrch="all users") returned 0x0
	[0116.361] StrStrW (lpFirst="5m0dqrr1haz408kcthqf", lpSrch="winnt") returned 0x0
	[0116.361] StrStrW (lpFirst="5m0dqrr1haz408kcthqf", lpSrch="appdata") returned 0x0
	[0116.361] StrStrW (lpFirst="5m0dqrr1haz408kcthqf", lpSrch="application data") returned 0x0
	[0116.361] StrStrW (lpFirst="5m0dqrr1haz408kcthqf", lpSrch="local settings") returned 0x0
	[0116.361] StrStrW (lpFirst="5m0dqrr1haz408kcthqf", lpSrch="boot") returned 0x0
	[0116.361] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0116.361] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351ffc0
	[0116.361] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\*", lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71f77320, ftCreationTime.dwHighDateTime=0x1d5e13b, ftLastAccessTime.dwLowDateTime=0x1e0e5ac0, ftLastAccessTime.dwHighDateTime=0x1d5df07, ftLastWriteTime.dwLowDateTime=0x1e0e5ac0, ftLastWriteTime.dwHighDateTime=0x1d5df07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ebd0
	[0116.362] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffc0 | out: hHeap=0x5f0000) returned 1
	[0116.362] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351ffc0
	[0116.362] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0116.362] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0116.362] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffc0 | out: hHeap=0x5f0000) returned 1
	[0116.362] FindNextFileW (in: hFindFile=0x61ebd0, lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71f77320, ftCreationTime.dwHighDateTime=0x1d5e13b, ftLastAccessTime.dwLowDateTime=0x1e0e5ac0, ftLastAccessTime.dwHighDateTime=0x1d5df07, ftLastWriteTime.dwLowDateTime=0x1e0e5ac0, ftLastWriteTime.dwHighDateTime=0x1d5df07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0116.362] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351ffc0
	[0116.362] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x166) returned 0x4081c98
	[0116.362] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffc0 | out: hHeap=0x5f0000) returned 1
	[0116.362] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0116.362] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081c98 | out: hHeap=0x5f0000) returned 1
	[0116.362] FindNextFileW (in: hFindFile=0x61ebd0, lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6eaddb0, ftCreationTime.dwHighDateTime=0x1d5e62f, ftLastAccessTime.dwLowDateTime=0x3278700, ftLastAccessTime.dwHighDateTime=0x1d5da3d, ftLastWriteTime.dwLowDateTime=0x3278700, ftLastWriteTime.dwHighDateTime=0x1d5da3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0_-2dosY6Ya1iK-TDh", cAlternateFileName="0_-2DO~1")) returned 1
	[0116.362] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351ffc0
	[0116.362] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x166) returned 0x4081c98
	[0116.362] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffc0 | out: hHeap=0x5f0000) returned 1
	[0116.362] lstrcmpW (lpString1="..", lpString2="0_-2dosY6Ya1iK-TDh") returned -1
	[0116.362] lstrcmpW (lpString1=".", lpString2="0_-2dosY6Ya1iK-TDh") returned -1
	[0116.363] StrStrW (lpFirst="0_-2dosy6ya1ik-tdh", lpSrch="programdata") returned 0x0
	[0116.363] StrStrW (lpFirst="0_-2dosy6ya1ik-tdh", lpSrch="$recycle.bin") returned 0x0
	[0116.363] StrStrW (lpFirst="0_-2dosy6ya1ik-tdh", lpSrch="program files") returned 0x0
	[0116.363] StrStrW (lpFirst="0_-2dosy6ya1ik-tdh", lpSrch="windows") returned 0x0
	[0116.363] StrStrW (lpFirst="0_-2dosy6ya1ik-tdh", lpSrch="all users") returned 0x0
	[0116.363] StrStrW (lpFirst="0_-2dosy6ya1ik-tdh", lpSrch="winnt") returned 0x0
	[0116.363] StrStrW (lpFirst="0_-2dosy6ya1ik-tdh", lpSrch="appdata") returned 0x0
	[0116.363] StrStrW (lpFirst="0_-2dosy6ya1ik-tdh", lpSrch="application data") returned 0x0
	[0116.363] StrStrW (lpFirst="0_-2dosy6ya1ik-tdh", lpSrch="local settings") returned 0x0
	[0116.363] StrStrW (lpFirst="0_-2dosy6ya1ik-tdh", lpSrch="boot") returned 0x0
	[0116.363] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x672790
	[0116.363] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x6728b8
	[0116.363] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\*", lpFindFileData=0x3f6d870 | out: lpFindFileData=0x3f6d870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6eaddb0, ftCreationTime.dwHighDateTime=0x1d5e62f, ftLastAccessTime.dwLowDateTime=0x3278700, ftLastAccessTime.dwHighDateTime=0x1d5da3d, ftLastWriteTime.dwLowDateTime=0x3278700, ftLastWriteTime.dwHighDateTime=0x1d5da3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ec10
	[0116.363] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6728b8 | out: hHeap=0x5f0000) returned 1
	[0116.363] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x6728b8
	[0116.363] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0116.364] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0116.364] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6728b8 | out: hHeap=0x5f0000) returned 1
	[0116.364] FindNextFileW (in: hFindFile=0x61ec10, lpFindFileData=0x3f6d870 | out: lpFindFileData=0x3f6d870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6eaddb0, ftCreationTime.dwHighDateTime=0x1d5e62f, ftLastAccessTime.dwLowDateTime=0x3278700, ftLastAccessTime.dwHighDateTime=0x1d5da3d, ftLastWriteTime.dwLowDateTime=0x3278700, ftLastWriteTime.dwHighDateTime=0x1d5da3d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0116.364] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x6728b8
	[0116.364] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0116.364] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6728b8 | out: hHeap=0x5f0000) returned 1
	[0116.364] FindNextFileW (in: hFindFile=0x61ec10, lpFindFileData=0x3f6d870 | out: lpFindFileData=0x3f6d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53290f40, ftCreationTime.dwHighDateTime=0x1d5dd11, ftLastAccessTime.dwLowDateTime=0x554d8d10, ftLastAccessTime.dwHighDateTime=0x1d5d9c8, ftLastWriteTime.dwLowDateTime=0x554d8d10, ftLastWriteTime.dwHighDateTime=0x1d5d9c8, nFileSizeHigh=0x0, nFileSizeLow=0xb0e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="av7UdVnl1f2 v.xls", cAlternateFileName="AV7UDV~1.XLS")) returned 1
	[0116.364] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x6728b8
	[0116.364] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x1ae) returned 0x6729e0
	[0116.365] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6728b8 | out: hHeap=0x5f0000) returned 1
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="ntldr") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="pagefile.sys") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="ntdetect.com") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="autoexec.bat") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="desktop.ini") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="autorun.inf") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="ntuser.dat") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="iconcache.db") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="bootsect.bak") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="boot.ini") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="bootfont.bin") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="config.sys") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="io.sys") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="msdos.sys") returned 0x0
	[0116.365] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="ntuser.dat.log") returned 0x0
	[0116.366] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="thumbs.db") returned 0x0
	[0116.366] StrStrW (lpFirst="av7udvnl1f2 v.xls", lpSrch="swapfile.sys") returned 0x0
	[0116.366] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\av7UdVnl1f2 v.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\av7udvnl1f2 v.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0116.366] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6d798 | out: lpFileSize=0x3f6d798*=45286) returned 1
	[0116.366] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.366] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.379] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x140) returned 0x35288e0
	[0116.379] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x4047060
	[0116.379] CryptAcquireContextW (in: phProv=0x3f6d46c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6d46c*=0x633110) returned 1
	[0116.380] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6d480 | out: pbBuffer=0x3f6d480) returned 1
	[0116.380] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.380] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.390] GetLastError () returned 0x3e5
	[0116.390] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6729e0 | out: hHeap=0x5f0000) returned 1
	[0116.390] FindNextFileW (in: hFindFile=0x61ec10, lpFindFileData=0x3f6d870 | out: lpFindFileData=0x3f6d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09a8750, ftCreationTime.dwHighDateTime=0x1d5e2d8, ftLastAccessTime.dwLowDateTime=0xf7c826c0, ftLastAccessTime.dwHighDateTime=0x1d5de7f, ftLastWriteTime.dwLowDateTime=0xf7c826c0, ftLastWriteTime.dwHighDateTime=0x1d5de7f, nFileSizeHigh=0x0, nFileSizeLow=0x11eb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSyrXWVCegiVWe.docx", cAlternateFileName="DSYRXW~1.DOC")) returned 1
	[0116.390] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x6728b8
	[0116.390] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x1ae) returned 0x6729e0
	[0116.390] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6728b8 | out: hHeap=0x5f0000) returned 1
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="ntldr") returned 0x0
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="pagefile.sys") returned 0x0
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="ntdetect.com") returned 0x0
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="autoexec.bat") returned 0x0
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="desktop.ini") returned 0x0
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="autorun.inf") returned 0x0
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="ntuser.dat") returned 0x0
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="iconcache.db") returned 0x0
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="bootsect.bak") returned 0x0
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="boot.ini") returned 0x0
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="bootfont.bin") returned 0x0
	[0116.390] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="config.sys") returned 0x0
	[0116.391] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="io.sys") returned 0x0
	[0116.391] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="msdos.sys") returned 0x0
	[0116.391] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.391] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="thumbs.db") returned 0x0
	[0116.391] StrStrW (lpFirst="dsyrxwvcegivwe.docx", lpSrch="swapfile.sys") returned 0x0
	[0116.391] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\DSyrXWVCegiVWe.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\dsyrxwvcegivwe.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0116.391] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6d798 | out: lpFileSize=0x3f6d798*=73401) returned 1
	[0116.391] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.391] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.404] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x140) returned 0x3528cb8
	[0116.404] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x4047060
	[0116.405] CryptAcquireContextW (in: phProv=0x3f6d46c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6d46c*=0x633110) returned 1
	[0116.405] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6d480 | out: pbBuffer=0x3f6d480) returned 1
	[0116.405] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.405] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.407] GetLastError () returned 0x3e5
	[0116.407] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6729e0 | out: hHeap=0x5f0000) returned 1
	[0116.407] FindNextFileW (in: hFindFile=0x61ec10, lpFindFileData=0x3f6d870 | out: lpFindFileData=0x3f6d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x852e2b00, ftCreationTime.dwHighDateTime=0x1d5e5be, ftLastAccessTime.dwLowDateTime=0xeb192d0, ftLastAccessTime.dwHighDateTime=0x1d5e6e7, ftLastWriteTime.dwLowDateTime=0xeb192d0, ftLastWriteTime.dwHighDateTime=0x1d5e6e7, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjy1xiXyqPB.pps", cAlternateFileName="JJY1XI~1.PPS")) returned 1
	[0116.407] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x6728b8
	[0116.407] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x1ae) returned 0x6729e0
	[0116.407] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6728b8 | out: hHeap=0x5f0000) returned 1
	[0116.407] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.407] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="ntldr") returned 0x0
	[0116.407] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="pagefile.sys") returned 0x0
	[0116.407] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="ntdetect.com") returned 0x0
	[0116.407] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="autoexec.bat") returned 0x0
	[0116.407] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="desktop.ini") returned 0x0
	[0116.407] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="autorun.inf") returned 0x0
	[0116.407] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="ntuser.dat") returned 0x0
	[0116.407] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="iconcache.db") returned 0x0
	[0116.408] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="bootsect.bak") returned 0x0
	[0116.408] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="boot.ini") returned 0x0
	[0116.408] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="bootfont.bin") returned 0x0
	[0116.408] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="config.sys") returned 0x0
	[0116.408] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="io.sys") returned 0x0
	[0116.408] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="msdos.sys") returned 0x0
	[0116.408] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="ntuser.dat.log") returned 0x0
	[0116.408] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="thumbs.db") returned 0x0
	[0116.408] StrStrW (lpFirst="jjy1xixyqpb.pps", lpSrch="swapfile.sys") returned 0x0
	[0116.408] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\jjy1xiXyqPB.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\jjy1xixyqpb.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3f4
	[0116.408] GetFileSizeEx (in: hFile=0x3f4, lpFileSize=0x3f6d798 | out: lpFileSize=0x3f6d798*=65536) returned 1
	[0116.408] CreateIoCompletionPort (FileHandle=0x3f4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.408] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0116.419] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x140) returned 0x35288e0
	[0116.419] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x4047570
	[0116.419] CryptAcquireContextW (in: phProv=0x3f6d46c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6d46c*=0x633110) returned 1
	[0116.420] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6d480 | out: pbBuffer=0x3f6d480) returned 1
	[0116.420] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.420] ReadFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.427] GetLastError () returned 0x3e5
	[0116.427] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6729e0 | out: hHeap=0x5f0000) returned 1
	[0116.427] FindNextFileW (in: hFindFile=0x61ec10, lpFindFileData=0x3f6d870 | out: lpFindFileData=0x3f6d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5acbfb90, ftCreationTime.dwHighDateTime=0x1d5dde3, ftLastAccessTime.dwLowDateTime=0x59e4b250, ftLastAccessTime.dwHighDateTime=0x1d5e395, ftLastWriteTime.dwLowDateTime=0x59e4b250, ftLastWriteTime.dwHighDateTime=0x1d5e395, nFileSizeHigh=0x0, nFileSizeLow=0x17dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="uEm-A36zUL.pptx", cAlternateFileName="UEM-A3~1.PPT")) returned 1
	[0116.427] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x6728b8
	[0116.427] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x1ae) returned 0x6729e0
	[0116.427] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6728b8 | out: hHeap=0x5f0000) returned 1
	[0116.427] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.427] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="ntldr") returned 0x0
	[0116.427] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="pagefile.sys") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="ntdetect.com") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="autoexec.bat") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="desktop.ini") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="autorun.inf") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="ntuser.dat") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="iconcache.db") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="bootsect.bak") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="boot.ini") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="bootfont.bin") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="config.sys") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="io.sys") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="msdos.sys") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="thumbs.db") returned 0x0
	[0116.428] StrStrW (lpFirst="uem-a36zul.pptx", lpSrch="swapfile.sys") returned 0x0
	[0116.428] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\uEm-A36zUL.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\uem-a36zul.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3f4
	[0116.428] GetFileSizeEx (in: hFile=0x3f4, lpFileSize=0x3f6d798 | out: lpFileSize=0x3f6d798*=97722) returned 1
	[0116.428] CreateIoCompletionPort (FileHandle=0x3f4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.428] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0116.458] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x140) returned 0x3528a28
	[0116.458] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x4047060
	[0116.458] CryptAcquireContextW (in: phProv=0x3f6d46c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6d46c*=0x633110) returned 1
	[0116.459] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6d480 | out: pbBuffer=0x3f6d480) returned 1
	[0116.459] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.459] ReadFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.467] GetLastError () returned 0x3e5
	[0116.467] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6729e0 | out: hHeap=0x5f0000) returned 1
	[0116.467] FindNextFileW (in: hFindFile=0x61ec10, lpFindFileData=0x3f6d870 | out: lpFindFileData=0x3f6d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5acbfb90, ftCreationTime.dwHighDateTime=0x1d5dde3, ftLastAccessTime.dwLowDateTime=0x59e4b250, ftLastAccessTime.dwHighDateTime=0x1d5e395, ftLastWriteTime.dwLowDateTime=0x59e4b250, ftLastWriteTime.dwHighDateTime=0x1d5e395, nFileSizeHigh=0x0, nFileSizeLow=0x17dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="uem-a36zul.pptx", cAlternateFileName="UEM-A3~1.PPT")) returned 0
	[0116.467] FindClose (in: hFindFile=0x61ec10 | out: hFindFile=0x61ec10) returned 1
	[0116.467] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0116.467] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x6728b8
	[0116.467] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x1ae) returned 0x6729e0
	[0116.467] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6728b8 | out: hHeap=0x5f0000) returned 1
	[0116.467] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\0_-2dosY6Ya1iK-TDh\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\0_-2dosy6ya1ik-tdh\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e4
	[0116.468] WriteFile (in: hFile=0x3e4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6d854, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6d854*=0x512, lpOverlapped=0x0) returned 1
	[0116.469] CloseHandle (hObject=0x3e4) returned 1
	[0116.469] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6729e0 | out: hHeap=0x5f0000) returned 1
	[0116.469] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0116.469] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672790 | out: hHeap=0x5f0000) returned 1
	[0116.469] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081c98 | out: hHeap=0x5f0000) returned 1
	[0116.469] FindNextFileW (in: hFindFile=0x61ebd0, lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd369f20, ftCreationTime.dwHighDateTime=0x1d5dbfd, ftLastAccessTime.dwLowDateTime=0xf4624d00, ftLastAccessTime.dwHighDateTime=0x1d5d97d, ftLastWriteTime.dwLowDateTime=0xf4624d00, ftLastWriteTime.dwHighDateTime=0x1d5d97d, nFileSizeHigh=0x0, nFileSizeLow=0x13da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="52tO9Moo3wbA6XAz20.pptx", cAlternateFileName="52TO9M~1.PPT")) returned 1
	[0116.469] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351ffc0
	[0116.469] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x166) returned 0x4081c98
	[0116.469] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffc0 | out: hHeap=0x5f0000) returned 1
	[0116.469] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.469] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="ntldr") returned 0x0
	[0116.469] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="pagefile.sys") returned 0x0
	[0116.469] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="ntdetect.com") returned 0x0
	[0116.469] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="autoexec.bat") returned 0x0
	[0116.469] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="desktop.ini") returned 0x0
	[0116.469] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="autorun.inf") returned 0x0
	[0116.469] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="ntuser.dat") returned 0x0
	[0116.469] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="iconcache.db") returned 0x0
	[0116.470] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="bootsect.bak") returned 0x0
	[0116.470] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="boot.ini") returned 0x0
	[0116.470] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="bootfont.bin") returned 0x0
	[0116.470] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="config.sys") returned 0x0
	[0116.470] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="io.sys") returned 0x0
	[0116.470] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="msdos.sys") returned 0x0
	[0116.470] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.470] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="thumbs.db") returned 0x0
	[0116.470] StrStrW (lpFirst="52to9moo3wba6xaz20.pptx", lpSrch="swapfile.sys") returned 0x0
	[0116.470] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\52tO9Moo3wbA6XAz20.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\52to9moo3wba6xaz20.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e4
	[0116.470] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x3f6dac8 | out: lpFileSize=0x3f6dac8*=81312) returned 1
	[0116.470] CreateIoCompletionPort (FileHandle=0x3e4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.470] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.480] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x672790
	[0116.480] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x6728b8
	[0116.480] CryptAcquireContextW (in: phProv=0x3f6d79c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6d79c*=0x633110) returned 1
	[0116.481] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6d7b0 | out: pbBuffer=0x3f6d7b0) returned 1
	[0116.481] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.481] ReadFile (in: hFile=0x3e4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.488] GetLastError () returned 0x3e5
	[0116.488] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081c98 | out: hHeap=0x5f0000) returned 1
	[0116.488] FindNextFileW (in: hFindFile=0x61ebd0, lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b5874c0, ftCreationTime.dwHighDateTime=0x1d5d9aa, ftLastAccessTime.dwLowDateTime=0x5104b50, ftLastAccessTime.dwHighDateTime=0x1d5e70e, ftLastWriteTime.dwLowDateTime=0x5104b50, ftLastWriteTime.dwHighDateTime=0x1d5e70e, nFileSizeHigh=0x0, nFileSizeLow=0x163a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DNsA6SztWUR9G8.ods", cAlternateFileName="DNSA6S~1.ODS")) returned 1
	[0116.488] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351ffc0
	[0116.488] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x166) returned 0x4081c98
	[0116.488] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffc0 | out: hHeap=0x5f0000) returned 1
	[0116.488] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.488] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="ntldr") returned 0x0
	[0116.488] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="pagefile.sys") returned 0x0
	[0116.488] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="ntdetect.com") returned 0x0
	[0116.488] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="autoexec.bat") returned 0x0
	[0116.488] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="desktop.ini") returned 0x0
	[0116.488] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="autorun.inf") returned 0x0
	[0116.488] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="ntuser.dat") returned 0x0
	[0116.489] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="iconcache.db") returned 0x0
	[0116.489] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="bootsect.bak") returned 0x0
	[0116.489] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="boot.ini") returned 0x0
	[0116.489] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="bootfont.bin") returned 0x0
	[0116.489] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="config.sys") returned 0x0
	[0116.489] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="io.sys") returned 0x0
	[0116.489] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="msdos.sys") returned 0x0
	[0116.489] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="ntuser.dat.log") returned 0x0
	[0116.489] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="thumbs.db") returned 0x0
	[0116.489] StrStrW (lpFirst="dnsa6sztwur9g8.ods", lpSrch="swapfile.sys") returned 0x0
	[0116.489] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\DNsA6SztWUR9G8.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\dnsa6sztwur9g8.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e4
	[0116.489] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x3f6dac8 | out: lpFileSize=0x3f6dac8*=91040) returned 1
	[0116.489] CreateIoCompletionPort (FileHandle=0x3e4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.489] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.499] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x672790
	[0116.499] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x6728b8
	[0116.499] CryptAcquireContextW (in: phProv=0x3f6d79c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6d79c*=0x633110) returned 1
	[0116.500] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6d7b0 | out: pbBuffer=0x3f6d7b0) returned 1
	[0116.500] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.500] ReadFile (in: hFile=0x3e4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0116.503] GetLastError () returned 0x3e5
	[0116.503] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081c98 | out: hHeap=0x5f0000) returned 1
	[0116.503] FindNextFileW (in: hFindFile=0x61ebd0, lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02c59c0, ftCreationTime.dwHighDateTime=0x1d5d97d, ftLastAccessTime.dwLowDateTime=0x7df27120, ftLastAccessTime.dwHighDateTime=0x1d5dd3a, ftLastWriteTime.dwLowDateTime=0x7df27120, ftLastWriteTime.dwHighDateTime=0x1d5dd3a, nFileSizeHigh=0x0, nFileSizeLow=0x181c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="_xH9hpBu68q0fhrFug.pptx", cAlternateFileName="_XH9HP~1.PPT")) returned 1
	[0116.503] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351ffc0
	[0116.503] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x166) returned 0x672dc8
	[0116.503] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffc0 | out: hHeap=0x5f0000) returned 1
	[0116.503] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.503] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="ntldr") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="pagefile.sys") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="ntdetect.com") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="autoexec.bat") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="desktop.ini") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="autorun.inf") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="ntuser.dat") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="iconcache.db") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="bootsect.bak") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="boot.ini") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="bootfont.bin") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="config.sys") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="io.sys") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="msdos.sys") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="thumbs.db") returned 0x0
	[0116.504] StrStrW (lpFirst="_xh9hpbu68q0fhrfug.pptx", lpSrch="swapfile.sys") returned 0x0
	[0116.504] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\_xH9hpBu68q0fhrFug.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\_xh9hpbu68q0fhrfug.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3f4
	[0116.505] GetFileSizeEx (in: hFile=0x3f4, lpFileSize=0x3f6dac8 | out: lpFileSize=0x3f6dac8*=98760) returned 1
	[0116.505] CreateIoCompletionPort (FileHandle=0x3f4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.505] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0116.515] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x120) returned 0x4081c98
	[0116.515] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x4047060
	[0116.515] CryptAcquireContextW (in: phProv=0x3f6d79c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6d79c*=0x633110) returned 1
	[0116.515] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6d7b0 | out: pbBuffer=0x3f6d7b0) returned 1
	[0116.515] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.516] ReadFile (in: hFile=0x3f4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.523] GetLastError () returned 0x3e5
	[0116.523] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672dc8 | out: hHeap=0x5f0000) returned 1
	[0116.523] FindNextFileW (in: hFindFile=0x61ebd0, lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02c59c0, ftCreationTime.dwHighDateTime=0x1d5d97d, ftLastAccessTime.dwLowDateTime=0x7df27120, ftLastAccessTime.dwHighDateTime=0x1d5dd3a, ftLastWriteTime.dwLowDateTime=0x7df27120, ftLastWriteTime.dwHighDateTime=0x1d5dd3a, nFileSizeHigh=0x0, nFileSizeLow=0x181c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="_xh9hpbu68q0fhrfug.pptx", cAlternateFileName="_XH9HP~1.PPT")) returned 0
	[0116.523] FindClose (in: hFindFile=0x61ebd0 | out: hFindFile=0x61ebd0) returned 1
	[0116.523] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0116.523] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351ffc0
	[0116.523] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x166) returned 0x672dc8
	[0116.523] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351ffc0 | out: hHeap=0x5f0000) returned 1
	[0116.523] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\5m0DQrr1Haz408KCThqf\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\5m0dqrr1haz408kcthqf\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x38c
	[0116.524] WriteFile (in: hFile=0x38c, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6db84, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6db84*=0x512, lpOverlapped=0x0) returned 1
	[0116.525] CloseHandle (hObject=0x38c) returned 1
	[0116.526] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672dc8 | out: hHeap=0x5f0000) returned 1
	[0116.526] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0116.526] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0116.526] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.526] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff8e5800, ftCreationTime.dwHighDateTime=0x1d5e2be, ftLastAccessTime.dwLowDateTime=0xdbf54790, ftLastAccessTime.dwHighDateTime=0x1d5d900, ftLastWriteTime.dwLowDateTime=0xdbf54790, ftLastWriteTime.dwHighDateTime=0x1d5d900, nFileSizeHigh=0x0, nFileSizeLow=0x4e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="7imCwB.rtf", cAlternateFileName="")) returned 1
	[0116.526] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.526] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x136) returned 0x672dc8
	[0116.526] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="ntldr") returned 0x0
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="pagefile.sys") returned 0x0
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="ntdetect.com") returned 0x0
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="autoexec.bat") returned 0x0
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="desktop.ini") returned 0x0
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="autorun.inf") returned 0x0
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="ntuser.dat") returned 0x0
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="iconcache.db") returned 0x0
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="bootsect.bak") returned 0x0
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="boot.ini") returned 0x0
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="bootfont.bin") returned 0x0
	[0116.526] StrStrW (lpFirst="7imcwb.rtf", lpSrch="config.sys") returned 0x0
	[0116.527] StrStrW (lpFirst="7imcwb.rtf", lpSrch="io.sys") returned 0x0
	[0116.527] StrStrW (lpFirst="7imcwb.rtf", lpSrch="msdos.sys") returned 0x0
	[0116.527] StrStrW (lpFirst="7imcwb.rtf", lpSrch="ntuser.dat.log") returned 0x0
	[0116.527] StrStrW (lpFirst="7imcwb.rtf", lpSrch="thumbs.db") returned 0x0
	[0116.527] StrStrW (lpFirst="7imcwb.rtf", lpSrch="swapfile.sys") returned 0x0
	[0116.527] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\7imCwB.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\7imcwb.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0116.527] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=20061) returned 1
	[0116.527] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.527] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0116.536] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043068
	[0116.536] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0116.536] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0116.537] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0116.537] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.537] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.544] GetLastError () returned 0x3e5
	[0116.544] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672dc8 | out: hHeap=0x5f0000) returned 1
	[0116.544] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943e9400, ftCreationTime.dwHighDateTime=0x1d5dae6, ftLastAccessTime.dwLowDateTime=0x51cddaf0, ftLastAccessTime.dwHighDateTime=0x1d5e6a7, ftLastWriteTime.dwLowDateTime=0x51cddaf0, ftLastWriteTime.dwHighDateTime=0x1d5e6a7, nFileSizeHigh=0x0, nFileSizeLow=0x17dcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="daVeaa8IXqC.docx", cAlternateFileName="DAVEAA~1.DOC")) returned 1
	[0116.544] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.544] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x136) returned 0x672dc8
	[0116.544] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="ntldr") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="pagefile.sys") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="ntdetect.com") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="autoexec.bat") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="desktop.ini") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="autorun.inf") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="ntuser.dat") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="iconcache.db") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="bootsect.bak") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="boot.ini") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="bootfont.bin") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="config.sys") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="io.sys") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="msdos.sys") returned 0x0
	[0116.544] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.545] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="thumbs.db") returned 0x0
	[0116.545] StrStrW (lpFirst="daveaa8ixqc.docx", lpSrch="swapfile.sys") returned 0x0
	[0116.545] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\daVeaa8IXqC.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\daveaa8ixqc.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0116.545] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=97743) returned 1
	[0116.545] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.545] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0116.556] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x40819f8
	[0116.556] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0116.556] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0116.558] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0116.558] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.558] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.567] GetLastError () returned 0x3e5
	[0116.567] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672dc8 | out: hHeap=0x5f0000) returned 1
	[0116.567] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87d81e70, ftCreationTime.dwHighDateTime=0x1d5def1, ftLastAccessTime.dwLowDateTime=0x11a90cc0, ftLastAccessTime.dwHighDateTime=0x1d5d945, ftLastWriteTime.dwLowDateTime=0x11a90cc0, ftLastWriteTime.dwHighDateTime=0x1d5d945, nFileSizeHigh=0x0, nFileSizeLow=0x1117f, dwReserved0=0x0, dwReserved1=0x0, cFileName="feY4.ppt", cAlternateFileName="")) returned 1
	[0116.567] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.567] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x136) returned 0x672dc8
	[0116.567] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.567] StrStrW (lpFirst="fey4.ppt", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.567] StrStrW (lpFirst="fey4.ppt", lpSrch="ntldr") returned 0x0
	[0116.567] StrStrW (lpFirst="fey4.ppt", lpSrch="pagefile.sys") returned 0x0
	[0116.567] StrStrW (lpFirst="fey4.ppt", lpSrch="ntdetect.com") returned 0x0
	[0116.567] StrStrW (lpFirst="fey4.ppt", lpSrch="autoexec.bat") returned 0x0
	[0116.567] StrStrW (lpFirst="fey4.ppt", lpSrch="desktop.ini") returned 0x0
	[0116.567] StrStrW (lpFirst="fey4.ppt", lpSrch="autorun.inf") returned 0x0
	[0116.567] StrStrW (lpFirst="fey4.ppt", lpSrch="ntuser.dat") returned 0x0
	[0116.567] StrStrW (lpFirst="fey4.ppt", lpSrch="iconcache.db") returned 0x0
	[0116.567] StrStrW (lpFirst="fey4.ppt", lpSrch="bootsect.bak") returned 0x0
	[0116.568] StrStrW (lpFirst="fey4.ppt", lpSrch="boot.ini") returned 0x0
	[0116.568] StrStrW (lpFirst="fey4.ppt", lpSrch="bootfont.bin") returned 0x0
	[0116.568] StrStrW (lpFirst="fey4.ppt", lpSrch="config.sys") returned 0x0
	[0116.568] StrStrW (lpFirst="fey4.ppt", lpSrch="io.sys") returned 0x0
	[0116.568] StrStrW (lpFirst="fey4.ppt", lpSrch="msdos.sys") returned 0x0
	[0116.568] StrStrW (lpFirst="fey4.ppt", lpSrch="ntuser.dat.log") returned 0x0
	[0116.568] StrStrW (lpFirst="fey4.ppt", lpSrch="thumbs.db") returned 0x0
	[0116.568] StrStrW (lpFirst="fey4.ppt", lpSrch="swapfile.sys") returned 0x0
	[0116.568] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\feY4.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\fey4.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0116.568] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=70015) returned 1
	[0116.568] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.568] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0116.580] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043150
	[0116.580] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0116.580] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0116.581] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0116.581] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.581] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.593] GetLastError () returned 0x3e5
	[0116.593] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672dc8 | out: hHeap=0x5f0000) returned 1
	[0116.593] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c82e10, ftCreationTime.dwHighDateTime=0x1d5e4c1, ftLastAccessTime.dwLowDateTime=0x2829d8d0, ftLastAccessTime.dwHighDateTime=0x1d5e516, ftLastWriteTime.dwLowDateTime=0x2829d8d0, ftLastWriteTime.dwHighDateTime=0x1d5e516, nFileSizeHigh=0x0, nFileSizeLow=0xeba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wba4TGDIU14_.ots", cAlternateFileName="WBA4TG~1.OTS")) returned 1
	[0116.593] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.593] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x136) returned 0x672dc8
	[0116.593] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.593] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.593] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="ntldr") returned 0x0
	[0116.593] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="pagefile.sys") returned 0x0
	[0116.593] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="ntdetect.com") returned 0x0
	[0116.593] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="autoexec.bat") returned 0x0
	[0116.593] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="desktop.ini") returned 0x0
	[0116.593] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="autorun.inf") returned 0x0
	[0116.593] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="ntuser.dat") returned 0x0
	[0116.593] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="iconcache.db") returned 0x0
	[0116.593] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="bootsect.bak") returned 0x0
	[0116.593] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="boot.ini") returned 0x0
	[0116.594] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="bootfont.bin") returned 0x0
	[0116.594] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="config.sys") returned 0x0
	[0116.594] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="io.sys") returned 0x0
	[0116.594] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="msdos.sys") returned 0x0
	[0116.594] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="ntuser.dat.log") returned 0x0
	[0116.594] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="thumbs.db") returned 0x0
	[0116.594] StrStrW (lpFirst="wba4tgdiu14_.ots", lpSrch="swapfile.sys") returned 0x0
	[0116.594] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\wba4TGDIU14_.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\wba4tgdiu14_.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0116.594] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=60323) returned 1
	[0116.594] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.594] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0116.613] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x40819f8
	[0116.613] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0116.613] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0116.615] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0116.615] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.615] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0116.623] GetLastError () returned 0x3e5
	[0116.623] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x672dc8 | out: hHeap=0x5f0000) returned 1
	[0116.624] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c82e10, ftCreationTime.dwHighDateTime=0x1d5e4c1, ftLastAccessTime.dwLowDateTime=0x2829d8d0, ftLastAccessTime.dwHighDateTime=0x1d5e516, ftLastWriteTime.dwLowDateTime=0x2829d8d0, ftLastWriteTime.dwHighDateTime=0x1d5e516, nFileSizeHigh=0x0, nFileSizeLow=0xeba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wba4tgdiu14_.ots", cAlternateFileName="WBA4TG~1.OTS")) returned 0
	[0116.624] FindClose (in: hFindFile=0x61eb90 | out: hFindFile=0x61eb90) returned 1
	[0116.624] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0116.624] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0116.624] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x136) returned 0x40819f8
	[0116.624] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618dd8 | out: hHeap=0x5f0000) returned 1
	[0116.624] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\b3-Xp23y2tCQVfIgfUz-\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\b3-xp23y2tcqvfigfuz-\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0116.624] WriteFile (in: hFile=0x3ec, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6deb4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6deb4*=0x512, lpOverlapped=0x0) returned 1
	[0116.626] CloseHandle (hObject=0x3ec) returned 1
	[0116.626] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.626] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0116.626] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0116.626] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0116.626] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae764280, ftCreationTime.dwHighDateTime=0x1d5e0a1, ftLastAccessTime.dwLowDateTime=0x1677490, ftLastAccessTime.dwHighDateTime=0x1d5df2c, ftLastWriteTime.dwLowDateTime=0x1677490, ftLastWriteTime.dwHighDateTime=0x1d5df2c, nFileSizeHigh=0x0, nFileSizeLow=0x6c25, dwReserved0=0x0, dwReserved1=0x0, cFileName="YrzxumZnNrT_.doc", cAlternateFileName="YRZXUM~1.DOC")) returned 1
	[0116.626] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.626] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0116.626] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.626] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.626] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="ntldr") returned 0x0
	[0116.626] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="pagefile.sys") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="ntdetect.com") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="autoexec.bat") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="desktop.ini") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="autorun.inf") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="ntuser.dat") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="iconcache.db") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="bootsect.bak") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="boot.ini") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="bootfont.bin") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="config.sys") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="io.sys") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="msdos.sys") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="ntuser.dat.log") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="thumbs.db") returned 0x0
	[0116.627] StrStrW (lpFirst="yrzxumznnrt_.doc", lpSrch="swapfile.sys") returned 0x0
	[0116.627] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\YrzxumZnNrT_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\yrzxumznnrt_.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0116.627] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=27685) returned 1
	[0116.627] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.627] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.638] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0116.638] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0116.638] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0116.639] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0116.639] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.639] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.645] GetLastError () returned 0x3e5
	[0116.645] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0116.645] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae764280, ftCreationTime.dwHighDateTime=0x1d5e0a1, ftLastAccessTime.dwLowDateTime=0x1677490, ftLastAccessTime.dwHighDateTime=0x1d5df2c, ftLastWriteTime.dwLowDateTime=0x1677490, ftLastWriteTime.dwHighDateTime=0x1d5df2c, nFileSizeHigh=0x0, nFileSizeLow=0x6c25, dwReserved0=0x0, dwReserved1=0x0, cFileName="yrzxumznnrt_.doc", cAlternateFileName="YRZXUM~1.DOC")) returned 0
	[0116.645] FindClose (in: hFindFile=0x61ea50 | out: hFindFile=0x61ea50) returned 1
	[0116.645] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0116.645] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0116.645] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0116.645] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0116.645] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\_8SJtLW\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\_8sjtlw\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0116.645] WriteFile (in: hFile=0x3e0, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e1e4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e1e4*=0x512, lpOverlapped=0x0) returned 1
	[0116.647] CloseHandle (hObject=0x3e0) returned 1
	[0116.647] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0116.647] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0116.647] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0116.647] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35167b8 | out: hHeap=0x5f0000) returned 1
	[0116.647] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd21cd3e0, ftCreationTime.dwHighDateTime=0x1d5e432, ftLastAccessTime.dwLowDateTime=0xd0491470, ftLastAccessTime.dwHighDateTime=0x1d5e5d6, ftLastWriteTime.dwLowDateTime=0xd0491470, ftLastWriteTime.dwHighDateTime=0x1d5e5d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_8sjtlw", cAlternateFileName="")) returned 0
	[0116.647] FindClose (in: hFindFile=0x61e950 | out: hFindFile=0x61e950) returned 1
	[0116.647] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0116.647] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0116.647] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0116.647] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639fc8 | out: hHeap=0x5f0000) returned 1
	[0116.647] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\ypfcybJS\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\ypfcybjs\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0116.648] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e514, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e514*=0x512, lpOverlapped=0x0) returned 1
	[0116.649] CloseHandle (hObject=0x3d8) returned 1
	[0116.649] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0116.649] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0116.649] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0116.649] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0116.649] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80202e80, ftCreationTime.dwHighDateTime=0x1d5e4f9, ftLastAccessTime.dwLowDateTime=0xe63e5670, ftLastAccessTime.dwHighDateTime=0x1d5e7f0, ftLastWriteTime.dwLowDateTime=0xe63e5670, ftLastWriteTime.dwHighDateTime=0x1d5e7f0, nFileSizeHigh=0x0, nFileSizeLow=0xea57, dwReserved0=0x0, dwReserved1=0x0, cFileName="_cIQ9GOKM2uAOWto.xlsx", cAlternateFileName="_CIQ9G~1.XLS")) returned 1
	[0116.649] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0116.649] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0116.649] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0116.649] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.649] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="ntldr") returned 0x0
	[0116.649] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="pagefile.sys") returned 0x0
	[0116.649] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="ntdetect.com") returned 0x0
	[0116.649] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="autoexec.bat") returned 0x0
	[0116.649] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="desktop.ini") returned 0x0
	[0116.649] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="autorun.inf") returned 0x0
	[0116.649] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="ntuser.dat") returned 0x0
	[0116.649] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="iconcache.db") returned 0x0
	[0116.649] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="bootsect.bak") returned 0x0
	[0116.649] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="boot.ini") returned 0x0
	[0116.650] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="bootfont.bin") returned 0x0
	[0116.650] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="config.sys") returned 0x0
	[0116.650] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="io.sys") returned 0x0
	[0116.650] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="msdos.sys") returned 0x0
	[0116.650] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.650] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="thumbs.db") returned 0x0
	[0116.650] StrStrW (lpFirst="_ciq9gokm2uaowto.xlsx", lpSrch="swapfile.sys") returned 0x0
	[0116.650] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\_cIQ9GOKM2uAOWto.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\_ciq9gokm2uaowto.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0116.650] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=59991) returned 1
	[0116.650] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.650] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.659] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0116.659] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0116.660] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0116.660] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0116.660] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.660] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.667] GetLastError () returned 0x3e5
	[0116.668] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0116.668] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80202e80, ftCreationTime.dwHighDateTime=0x1d5e4f9, ftLastAccessTime.dwLowDateTime=0xe63e5670, ftLastAccessTime.dwHighDateTime=0x1d5e7f0, ftLastWriteTime.dwLowDateTime=0xe63e5670, ftLastWriteTime.dwHighDateTime=0x1d5e7f0, nFileSizeHigh=0x0, nFileSizeLow=0xea57, dwReserved0=0x0, dwReserved1=0x0, cFileName="_ciq9gokm2uaowto.xlsx", cAlternateFileName="_CIQ9G~1.XLS")) returned 0
	[0116.668] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0116.668] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0116.668] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0116.668] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0116.668] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0116.668] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\wa4DIlfTXL3AOTf05\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wa4dilftxl3aotf05\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c4
	[0116.668] WriteFile (in: hFile=0x3c4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0116.669] CloseHandle (hObject=0x3c4) returned 1
	[0116.669] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0116.669] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0116.669] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0116.669] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.669] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7067710, ftCreationTime.dwHighDateTime=0x1d5cf5b, ftLastAccessTime.dwLowDateTime=0x30fb0c0, ftLastAccessTime.dwHighDateTime=0x1d5a3ac, ftLastWriteTime.dwLowDateTime=0x30fb0c0, ftLastWriteTime.dwHighDateTime=0x1d5a3ac, nFileSizeHigh=0x0, nFileSizeLow=0xa3c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XjMrrETi4IkvROeU.pptx", cAlternateFileName="XJMRRE~1.PPT")) returned 1
	[0116.669] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.669] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0116.669] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="ntldr") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="pagefile.sys") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="ntdetect.com") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="autoexec.bat") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="desktop.ini") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="autorun.inf") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="ntuser.dat") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="iconcache.db") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="bootsect.bak") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="boot.ini") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="bootfont.bin") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="config.sys") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="io.sys") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="msdos.sys") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="thumbs.db") returned 0x0
	[0116.670] StrStrW (lpFirst="xjmrreti4ikvroeu.pptx", lpSrch="swapfile.sys") returned 0x0
	[0116.670] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\XjMrrETi4IkvROeU.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xjmrreti4ikvroeu.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0116.671] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=41925) returned 1
	[0116.671] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.671] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.682] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0116.682] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0116.682] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0116.683] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0116.683] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0116.683] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.690] GetLastError () returned 0x3e5
	[0116.690] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.690] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe3b65d0, ftCreationTime.dwHighDateTime=0x1d5b3f9, ftLastAccessTime.dwLowDateTime=0x73ab51d0, ftLastAccessTime.dwHighDateTime=0x1d5a37b, ftLastWriteTime.dwLowDateTime=0x73ab51d0, ftLastWriteTime.dwHighDateTime=0x1d5a37b, nFileSizeHigh=0x0, nFileSizeLow=0x15678, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZM7E2pUAGp.xlsx", cAlternateFileName="ZM7E2P~1.XLS")) returned 1
	[0116.690] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.690] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0116.690] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="ntldr") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="pagefile.sys") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="ntdetect.com") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="autoexec.bat") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="desktop.ini") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="autorun.inf") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="ntuser.dat") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="iconcache.db") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="bootsect.bak") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="boot.ini") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="bootfont.bin") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="config.sys") returned 0x0
	[0116.690] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="io.sys") returned 0x0
	[0116.691] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="msdos.sys") returned 0x0
	[0116.691] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.691] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="thumbs.db") returned 0x0
	[0116.691] StrStrW (lpFirst="zm7e2puagp.xlsx", lpSrch="swapfile.sys") returned 0x0
	[0116.691] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZM7E2pUAGp.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zm7e2puagp.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0116.691] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=87672) returned 1
	[0116.691] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.691] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.701] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0116.701] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0116.701] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0116.702] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0116.702] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0116.702] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.730] GetLastError () returned 0x3e5
	[0116.730] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.730] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9655b0, ftCreationTime.dwHighDateTime=0x1d5d608, ftLastAccessTime.dwLowDateTime=0xedbd920, ftLastAccessTime.dwHighDateTime=0x1d5ac39, ftLastWriteTime.dwLowDateTime=0xedbd920, ftLastWriteTime.dwHighDateTime=0x1d5ac39, nFileSizeHigh=0x0, nFileSizeLow=0x935a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZUHt.docx", cAlternateFileName="ZUHT~1.DOC")) returned 1
	[0116.730] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.730] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0116.730] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="ntldr") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="pagefile.sys") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="ntdetect.com") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="autoexec.bat") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="desktop.ini") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="autorun.inf") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="ntuser.dat") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="iconcache.db") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="bootsect.bak") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="boot.ini") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="bootfont.bin") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="config.sys") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="io.sys") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="msdos.sys") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.730] StrStrW (lpFirst="zuht.docx", lpSrch="thumbs.db") returned 0x0
	[0116.731] StrStrW (lpFirst="zuht.docx", lpSrch="swapfile.sys") returned 0x0
	[0116.731] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZUHt.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zuht.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0116.731] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=37722) returned 1
	[0116.731] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.740] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0116.740] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0116.740] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0116.741] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0116.741] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0116.741] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.747] GetLastError () returned 0x3e5
	[0116.747] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.747] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5190a5f0, ftCreationTime.dwHighDateTime=0x1d57d1f, ftLastAccessTime.dwLowDateTime=0x6df59d20, ftLastAccessTime.dwHighDateTime=0x1d5e621, ftLastWriteTime.dwLowDateTime=0x6df59d20, ftLastWriteTime.dwHighDateTime=0x1d5e621, nFileSizeHigh=0x0, nFileSizeLow=0x5366, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_Y 4p2LV0.pptx", cAlternateFileName="_Y4P2L~1.PPT")) returned 1
	[0116.748] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.748] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0116.748] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="ntldr") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="pagefile.sys") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="ntdetect.com") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="autoexec.bat") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="desktop.ini") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="autorun.inf") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="ntuser.dat") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="iconcache.db") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="bootsect.bak") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="boot.ini") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="bootfont.bin") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="config.sys") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="io.sys") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="msdos.sys") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="ntuser.dat.log") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="thumbs.db") returned 0x0
	[0116.748] StrStrW (lpFirst="_y 4p2lv0.pptx", lpSrch="swapfile.sys") returned 0x0
	[0116.749] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_Y 4p2LV0.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_y 4p2lv0.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0116.749] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=21350) returned 1
	[0116.749] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.749] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.759] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0116.759] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0116.759] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0116.760] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0116.760] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0116.760] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.765] GetLastError () returned 0x3e5
	[0116.765] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.765] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5190a5f0, ftCreationTime.dwHighDateTime=0x1d57d1f, ftLastAccessTime.dwLowDateTime=0x6df59d20, ftLastAccessTime.dwHighDateTime=0x1d5e621, ftLastWriteTime.dwLowDateTime=0x6df59d20, ftLastWriteTime.dwHighDateTime=0x1d5e621, nFileSizeHigh=0x0, nFileSizeLow=0x5366, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_y 4p2lv0.pptx", cAlternateFileName="_Y4P2L~1.PPT")) returned 0
	[0116.765] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0116.765] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0116.765] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.765] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0116.765] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.765] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0116.766] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0116.766] CloseHandle (hObject=0x3bc) returned 1
	[0116.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0116.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0116.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0116.767] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0116.767] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0116.767] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0116.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0116.767] lstrcmpW (lpString1="..", lpString2="Downloads") returned -1
	[0116.767] lstrcmpW (lpString1=".", lpString2="Downloads") returned -1
	[0116.767] StrStrW (lpFirst="downloads", lpSrch="programdata") returned 0x0
	[0116.767] StrStrW (lpFirst="downloads", lpSrch="$recycle.bin") returned 0x0
	[0116.767] StrStrW (lpFirst="downloads", lpSrch="program files") returned 0x0
	[0116.767] StrStrW (lpFirst="downloads", lpSrch="windows") returned 0x0
	[0116.767] StrStrW (lpFirst="downloads", lpSrch="all users") returned 0x0
	[0116.767] StrStrW (lpFirst="downloads", lpSrch="winnt") returned 0x0
	[0116.767] StrStrW (lpFirst="downloads", lpSrch="appdata") returned 0x0
	[0116.767] StrStrW (lpFirst="downloads", lpSrch="application data") returned 0x0
	[0116.767] StrStrW (lpFirst="downloads", lpSrch="local settings") returned 0x0
	[0116.767] StrStrW (lpFirst="downloads", lpSrch="boot") returned 0x0
	[0116.767] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0116.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.768] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0116.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.768] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0116.768] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0116.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.768] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0116.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.768] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0116.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.768] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0116.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0116.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.768] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.768] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0116.768] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0116.768] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0116.768] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0116.769] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0116.769] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.769] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0116.769] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0116.769] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0116.769] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.769] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0116.769] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.769] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0116.772] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0116.772] CloseHandle (hObject=0x3bc) returned 1
	[0116.773] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.773] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0116.773] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0116.773] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0116.773] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0116.773] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0116.773] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0116.784] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0116.784] lstrcmpW (lpString1="..", lpString2="Favorites") returned -1
	[0116.784] lstrcmpW (lpString1=".", lpString2="Favorites") returned -1
	[0116.784] StrStrW (lpFirst="favorites", lpSrch="programdata") returned 0x0
	[0116.784] StrStrW (lpFirst="favorites", lpSrch="$recycle.bin") returned 0x0
	[0116.784] StrStrW (lpFirst="favorites", lpSrch="program files") returned 0x0
	[0116.784] StrStrW (lpFirst="favorites", lpSrch="windows") returned 0x0
	[0116.784] StrStrW (lpFirst="favorites", lpSrch="all users") returned 0x0
	[0116.784] StrStrW (lpFirst="favorites", lpSrch="winnt") returned 0x0
	[0116.784] StrStrW (lpFirst="favorites", lpSrch="appdata") returned 0x0
	[0116.784] StrStrW (lpFirst="favorites", lpSrch="application data") returned 0x0
	[0116.784] StrStrW (lpFirst="favorites", lpSrch="local settings") returned 0x0
	[0116.784] StrStrW (lpFirst="favorites", lpSrch="boot") returned 0x0
	[0116.784] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0116.784] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.784] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0116.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.785] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.785] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0116.785] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0116.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.785] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0116.785] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.785] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0116.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.785] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0116.785] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.785] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0116.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0116.785] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.785] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0116.785] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0116.785] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0116.785] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0116.785] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0116.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.785] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0116.785] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0116.785] lstrcmpW (lpString1="..", lpString2="Links") returned -1
	[0116.785] lstrcmpW (lpString1=".", lpString2="Links") returned -1
	[0116.785] StrStrW (lpFirst="links", lpSrch="programdata") returned 0x0
	[0116.785] StrStrW (lpFirst="links", lpSrch="$recycle.bin") returned 0x0
	[0116.785] StrStrW (lpFirst="links", lpSrch="program files") returned 0x0
	[0116.786] StrStrW (lpFirst="links", lpSrch="windows") returned 0x0
	[0116.786] StrStrW (lpFirst="links", lpSrch="all users") returned 0x0
	[0116.786] StrStrW (lpFirst="links", lpSrch="winnt") returned 0x0
	[0116.786] StrStrW (lpFirst="links", lpSrch="appdata") returned 0x0
	[0116.786] StrStrW (lpFirst="links", lpSrch="application data") returned 0x0
	[0116.786] StrStrW (lpFirst="links", lpSrch="local settings") returned 0x0
	[0116.786] StrStrW (lpFirst="links", lpSrch="boot") returned 0x0
	[0116.786] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0116.786] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0116.786] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0116.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0116.786] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635500
	[0116.786] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0116.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635500 | out: hHeap=0x5f0000) returned 1
	[0116.786] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0116.786] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0116.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.786] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0116.786] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635500
	[0116.786] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0116.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635500 | out: hHeap=0x5f0000) returned 1
	[0116.786] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0116.787] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.787] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0116.787] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635500
	[0116.787] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0116.787] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635500 | out: hHeap=0x5f0000) returned 1
	[0116.787] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.787] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0116.787] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0116.787] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0116.787] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0116.787] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0116.787] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.787] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1
	[0116.787] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635500
	[0116.787] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0116.787] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635500 | out: hHeap=0x5f0000) returned 1
	[0116.787] StrStrW (lpFirst="suggested sites.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.787] StrStrW (lpFirst="suggested sites.url", lpSrch="ntldr") returned 0x0
	[0116.787] StrStrW (lpFirst="suggested sites.url", lpSrch="pagefile.sys") returned 0x0
	[0116.787] StrStrW (lpFirst="suggested sites.url", lpSrch="ntdetect.com") returned 0x0
	[0116.787] StrStrW (lpFirst="suggested sites.url", lpSrch="autoexec.bat") returned 0x0
	[0116.787] StrStrW (lpFirst="suggested sites.url", lpSrch="desktop.ini") returned 0x0
	[0116.787] StrStrW (lpFirst="suggested sites.url", lpSrch="autorun.inf") returned 0x0
	[0116.787] StrStrW (lpFirst="suggested sites.url", lpSrch="ntuser.dat") returned 0x0
	[0116.787] StrStrW (lpFirst="suggested sites.url", lpSrch="iconcache.db") returned 0x0
	[0116.787] StrStrW (lpFirst="suggested sites.url", lpSrch="bootsect.bak") returned 0x0
	[0116.788] StrStrW (lpFirst="suggested sites.url", lpSrch="boot.ini") returned 0x0
	[0116.788] StrStrW (lpFirst="suggested sites.url", lpSrch="bootfont.bin") returned 0x0
	[0116.788] StrStrW (lpFirst="suggested sites.url", lpSrch="config.sys") returned 0x0
	[0116.788] StrStrW (lpFirst="suggested sites.url", lpSrch="io.sys") returned 0x0
	[0116.788] StrStrW (lpFirst="suggested sites.url", lpSrch="msdos.sys") returned 0x0
	[0116.788] StrStrW (lpFirst="suggested sites.url", lpSrch="ntuser.dat.log") returned 0x0
	[0116.788] StrStrW (lpFirst="suggested sites.url", lpSrch="thumbs.db") returned 0x0
	[0116.788] StrStrW (lpFirst="suggested sites.url", lpSrch="swapfile.sys") returned 0x0
	[0116.788] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0116.788] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=236) returned 1
	[0116.788] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.788] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0116.850] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0116.850] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0116.850] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0116.851] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0116.851] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0116.852] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0116.858] GetLastError () returned 0x3e5
	[0116.858] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0116.858] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
	[0116.858] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635500
	[0116.858] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0116.858] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635500 | out: hHeap=0x5f0000) returned 1
	[0116.858] StrStrW (lpFirst="web slice gallery.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0116.858] StrStrW (lpFirst="web slice gallery.url", lpSrch="ntldr") returned 0x0
	[0116.858] StrStrW (lpFirst="web slice gallery.url", lpSrch="pagefile.sys") returned 0x0
	[0116.858] StrStrW (lpFirst="web slice gallery.url", lpSrch="ntdetect.com") returned 0x0
	[0116.858] StrStrW (lpFirst="web slice gallery.url", lpSrch="autoexec.bat") returned 0x0
	[0116.858] StrStrW (lpFirst="web slice gallery.url", lpSrch="desktop.ini") returned 0x0
	[0116.859] StrStrW (lpFirst="web slice gallery.url", lpSrch="autorun.inf") returned 0x0
	[0116.859] StrStrW (lpFirst="web slice gallery.url", lpSrch="ntuser.dat") returned 0x0
	[0116.859] StrStrW (lpFirst="web slice gallery.url", lpSrch="iconcache.db") returned 0x0
	[0116.859] StrStrW (lpFirst="web slice gallery.url", lpSrch="bootsect.bak") returned 0x0
	[0116.859] StrStrW (lpFirst="web slice gallery.url", lpSrch="boot.ini") returned 0x0
	[0116.859] StrStrW (lpFirst="web slice gallery.url", lpSrch="bootfont.bin") returned 0x0
	[0116.859] StrStrW (lpFirst="web slice gallery.url", lpSrch="config.sys") returned 0x0
	[0116.859] StrStrW (lpFirst="web slice gallery.url", lpSrch="io.sys") returned 0x0
	[0116.859] StrStrW (lpFirst="web slice gallery.url", lpSrch="msdos.sys") returned 0x0
	[0116.859] StrStrW (lpFirst="web slice gallery.url", lpSrch="ntuser.dat.log") returned 0x0
	[0116.859] StrStrW (lpFirst="web slice gallery.url", lpSrch="thumbs.db") returned 0x0
	[0116.859] StrStrW (lpFirst="web slice gallery.url", lpSrch="swapfile.sys") returned 0x0
	[0116.859] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0116.860] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=226) returned 1
	[0116.860] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0116.860] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.017] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0117.017] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.017] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0117.018] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.018] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0117.018] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0117.046] GetLastError () returned 0x3e5
	[0117.046] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0117.046] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="web slice gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0
	[0117.046] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0117.046] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0117.046] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635500
	[0117.046] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0117.046] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635500 | out: hHeap=0x5f0000) returned 1
	[0117.046] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c4
	[0117.049] WriteFile (in: hFile=0x3c4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0117.050] CloseHandle (hObject=0x3c4) returned 1
	[0117.050] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0117.050] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0117.050] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0117.050] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0117.050] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
	[0117.050] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0117.050] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0117.050] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0117.050] lstrcmpW (lpString1="..", lpString2="Microsoft Websites") returned -1
	[0117.050] lstrcmpW (lpString1=".", lpString2="Microsoft Websites") returned -1
	[0117.050] StrStrW (lpFirst="microsoft websites", lpSrch="programdata") returned 0x0
	[0117.050] StrStrW (lpFirst="microsoft websites", lpSrch="$recycle.bin") returned 0x0
	[0117.051] StrStrW (lpFirst="microsoft websites", lpSrch="program files") returned 0x0
	[0117.051] StrStrW (lpFirst="microsoft websites", lpSrch="windows") returned 0x0
	[0117.051] StrStrW (lpFirst="microsoft websites", lpSrch="all users") returned 0x0
	[0117.051] StrStrW (lpFirst="microsoft websites", lpSrch="winnt") returned 0x0
	[0117.051] StrStrW (lpFirst="microsoft websites", lpSrch="appdata") returned 0x0
	[0117.051] StrStrW (lpFirst="microsoft websites", lpSrch="application data") returned 0x0
	[0117.051] StrStrW (lpFirst="microsoft websites", lpSrch="local settings") returned 0x0
	[0117.051] StrStrW (lpFirst="microsoft websites", lpSrch="boot") returned 0x0
	[0117.051] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0117.051] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.051] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0117.053] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.053] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.053] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0117.053] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0117.053] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.053] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0117.053] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.053] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0117.053] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.053] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
	[0117.053] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.053] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0117.054] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="ntldr") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="pagefile.sys") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="ntdetect.com") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="autoexec.bat") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="desktop.ini") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="autorun.inf") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="ntuser.dat") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="iconcache.db") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="bootsect.bak") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="boot.ini") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="bootfont.bin") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="config.sys") returned 0x0
	[0117.054] StrStrW (lpFirst="ie add-on site.url", lpSrch="io.sys") returned 0x0
	[0117.055] StrStrW (lpFirst="ie add-on site.url", lpSrch="msdos.sys") returned 0x0
	[0117.055] StrStrW (lpFirst="ie add-on site.url", lpSrch="ntuser.dat.log") returned 0x0
	[0117.055] StrStrW (lpFirst="ie add-on site.url", lpSrch="thumbs.db") returned 0x0
	[0117.055] StrStrW (lpFirst="ie add-on site.url", lpSrch="swapfile.sys") returned 0x0
	[0117.055] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0117.055] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0117.055] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.055] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.068] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0117.068] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.068] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0117.069] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.069] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.069] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.071] GetLastError () returned 0x3e5
	[0117.071] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0117.071] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
	[0117.071] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.071] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0117.071] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.071] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.071] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="ntldr") returned 0x0
	[0117.071] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="pagefile.sys") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="ntdetect.com") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="autoexec.bat") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="desktop.ini") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="autorun.inf") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="ntuser.dat") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="iconcache.db") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="bootsect.bak") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="boot.ini") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="bootfont.bin") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="config.sys") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="io.sys") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="msdos.sys") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="ntuser.dat.log") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="thumbs.db") returned 0x0
	[0117.072] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="swapfile.sys") returned 0x0
	[0117.072] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0117.073] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0117.073] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.073] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0117.087] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0117.087] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0117.087] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0117.088] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.088] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.088] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0117.094] GetLastError () returned 0x3e5
	[0117.094] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0117.094] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
	[0117.094] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.094] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0117.094] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.094] StrStrW (lpFirst="microsoft at home.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.094] StrStrW (lpFirst="microsoft at home.url", lpSrch="ntldr") returned 0x0
	[0117.094] StrStrW (lpFirst="microsoft at home.url", lpSrch="pagefile.sys") returned 0x0
	[0117.094] StrStrW (lpFirst="microsoft at home.url", lpSrch="ntdetect.com") returned 0x0
	[0117.094] StrStrW (lpFirst="microsoft at home.url", lpSrch="autoexec.bat") returned 0x0
	[0117.094] StrStrW (lpFirst="microsoft at home.url", lpSrch="desktop.ini") returned 0x0
	[0117.094] StrStrW (lpFirst="microsoft at home.url", lpSrch="autorun.inf") returned 0x0
	[0117.094] StrStrW (lpFirst="microsoft at home.url", lpSrch="ntuser.dat") returned 0x0
	[0117.094] StrStrW (lpFirst="microsoft at home.url", lpSrch="iconcache.db") returned 0x0
	[0117.095] StrStrW (lpFirst="microsoft at home.url", lpSrch="bootsect.bak") returned 0x0
	[0117.095] StrStrW (lpFirst="microsoft at home.url", lpSrch="boot.ini") returned 0x0
	[0117.095] StrStrW (lpFirst="microsoft at home.url", lpSrch="bootfont.bin") returned 0x0
	[0117.095] StrStrW (lpFirst="microsoft at home.url", lpSrch="config.sys") returned 0x0
	[0117.095] StrStrW (lpFirst="microsoft at home.url", lpSrch="io.sys") returned 0x0
	[0117.095] StrStrW (lpFirst="microsoft at home.url", lpSrch="msdos.sys") returned 0x0
	[0117.095] StrStrW (lpFirst="microsoft at home.url", lpSrch="ntuser.dat.log") returned 0x0
	[0117.095] StrStrW (lpFirst="microsoft at home.url", lpSrch="thumbs.db") returned 0x0
	[0117.095] StrStrW (lpFirst="microsoft at home.url", lpSrch="swapfile.sys") returned 0x0
	[0117.095] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0117.095] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0117.095] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.095] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0117.109] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0117.109] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0117.109] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0117.110] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.110] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.110] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0117.117] GetLastError () returned 0x3e5
	[0117.117] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0117.117] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
	[0117.117] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.117] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0117.117] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="ntldr") returned 0x0
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="pagefile.sys") returned 0x0
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="ntdetect.com") returned 0x0
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="autoexec.bat") returned 0x0
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="desktop.ini") returned 0x0
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="autorun.inf") returned 0x0
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="ntuser.dat") returned 0x0
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="iconcache.db") returned 0x0
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="bootsect.bak") returned 0x0
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="boot.ini") returned 0x0
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="bootfont.bin") returned 0x0
	[0117.117] StrStrW (lpFirst="microsoft at work.url", lpSrch="config.sys") returned 0x0
	[0117.118] StrStrW (lpFirst="microsoft at work.url", lpSrch="io.sys") returned 0x0
	[0117.118] StrStrW (lpFirst="microsoft at work.url", lpSrch="msdos.sys") returned 0x0
	[0117.118] StrStrW (lpFirst="microsoft at work.url", lpSrch="ntuser.dat.log") returned 0x0
	[0117.118] StrStrW (lpFirst="microsoft at work.url", lpSrch="thumbs.db") returned 0x0
	[0117.118] StrStrW (lpFirst="microsoft at work.url", lpSrch="swapfile.sys") returned 0x0
	[0117.118] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0117.118] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0117.118] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.118] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0117.128] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0117.128] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0117.129] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0117.130] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.130] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.130] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0117.135] GetLastError () returned 0x3e5
	[0117.135] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0117.135] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
	[0117.135] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.135] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0117.135] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.135] StrStrW (lpFirst="microsoft store.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.135] StrStrW (lpFirst="microsoft store.url", lpSrch="ntldr") returned 0x0
	[0117.135] StrStrW (lpFirst="microsoft store.url", lpSrch="pagefile.sys") returned 0x0
	[0117.135] StrStrW (lpFirst="microsoft store.url", lpSrch="ntdetect.com") returned 0x0
	[0117.135] StrStrW (lpFirst="microsoft store.url", lpSrch="autoexec.bat") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="desktop.ini") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="autorun.inf") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="ntuser.dat") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="iconcache.db") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="bootsect.bak") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="boot.ini") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="bootfont.bin") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="config.sys") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="io.sys") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="msdos.sys") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="ntuser.dat.log") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="thumbs.db") returned 0x0
	[0117.136] StrStrW (lpFirst="microsoft store.url", lpSrch="swapfile.sys") returned 0x0
	[0117.136] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0117.143] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=134) returned 1
	[0117.143] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.143] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.153] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0117.153] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.153] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0117.154] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.154] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.154] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.155] GetLastError () returned 0x3e5
	[0117.155] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0117.155] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft store.url", cAlternateFileName="MICROS~1.URL")) returned 0
	[0117.155] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0117.155] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0117.155] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.155] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0117.155] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.155] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c4
	[0117.156] WriteFile (in: hFile=0x3c4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0117.157] CloseHandle (hObject=0x3c4) returned 1
	[0117.157] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0117.157] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0117.157] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0117.157] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0117.157] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
	[0117.157] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0117.157] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0117.157] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0117.157] lstrcmpW (lpString1="..", lpString2="MSN Websites") returned -1
	[0117.157] lstrcmpW (lpString1=".", lpString2="MSN Websites") returned -1
	[0117.157] StrStrW (lpFirst="msn websites", lpSrch="programdata") returned 0x0
	[0117.158] StrStrW (lpFirst="msn websites", lpSrch="$recycle.bin") returned 0x0
	[0117.158] StrStrW (lpFirst="msn websites", lpSrch="program files") returned 0x0
	[0117.158] StrStrW (lpFirst="msn websites", lpSrch="windows") returned 0x0
	[0117.158] StrStrW (lpFirst="msn websites", lpSrch="all users") returned 0x0
	[0117.158] StrStrW (lpFirst="msn websites", lpSrch="winnt") returned 0x0
	[0117.158] StrStrW (lpFirst="msn websites", lpSrch="appdata") returned 0x0
	[0117.158] StrStrW (lpFirst="msn websites", lpSrch="application data") returned 0x0
	[0117.158] StrStrW (lpFirst="msn websites", lpSrch="local settings") returned 0x0
	[0117.158] StrStrW (lpFirst="msn websites", lpSrch="boot") returned 0x0
	[0117.158] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0117.158] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0117.158] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0117.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0117.164] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0117.164] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0117.164] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0117.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0117.164] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0117.164] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0117.164] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0117.164] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0117.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.164] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
	[0117.164] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0117.164] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0117.164] StrStrW (lpFirst="msn autos.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.164] StrStrW (lpFirst="msn autos.url", lpSrch="ntldr") returned 0x0
	[0117.164] StrStrW (lpFirst="msn autos.url", lpSrch="pagefile.sys") returned 0x0
	[0117.164] StrStrW (lpFirst="msn autos.url", lpSrch="ntdetect.com") returned 0x0
	[0117.164] StrStrW (lpFirst="msn autos.url", lpSrch="autoexec.bat") returned 0x0
	[0117.164] StrStrW (lpFirst="msn autos.url", lpSrch="desktop.ini") returned 0x0
	[0117.164] StrStrW (lpFirst="msn autos.url", lpSrch="autorun.inf") returned 0x0
	[0117.164] StrStrW (lpFirst="msn autos.url", lpSrch="ntuser.dat") returned 0x0
	[0117.164] StrStrW (lpFirst="msn autos.url", lpSrch="iconcache.db") returned 0x0
	[0117.165] StrStrW (lpFirst="msn autos.url", lpSrch="bootsect.bak") returned 0x0
	[0117.165] StrStrW (lpFirst="msn autos.url", lpSrch="boot.ini") returned 0x0
	[0117.165] StrStrW (lpFirst="msn autos.url", lpSrch="bootfont.bin") returned 0x0
	[0117.165] StrStrW (lpFirst="msn autos.url", lpSrch="config.sys") returned 0x0
	[0117.165] StrStrW (lpFirst="msn autos.url", lpSrch="io.sys") returned 0x0
	[0117.165] StrStrW (lpFirst="msn autos.url", lpSrch="msdos.sys") returned 0x0
	[0117.165] StrStrW (lpFirst="msn autos.url", lpSrch="ntuser.dat.log") returned 0x0
	[0117.165] StrStrW (lpFirst="msn autos.url", lpSrch="thumbs.db") returned 0x0
	[0117.165] StrStrW (lpFirst="msn autos.url", lpSrch="swapfile.sys") returned 0x0
	[0117.165] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0117.165] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0117.165] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.165] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.175] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0117.175] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.175] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0117.176] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.176] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0117.176] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.177] GetLastError () returned 0x3e5
	[0117.177] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.177] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
	[0117.177] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0117.177] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.177] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0117.177] StrStrW (lpFirst="msn entertainment.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.177] StrStrW (lpFirst="msn entertainment.url", lpSrch="ntldr") returned 0x0
	[0117.177] StrStrW (lpFirst="msn entertainment.url", lpSrch="pagefile.sys") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="ntdetect.com") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="autoexec.bat") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="desktop.ini") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="autorun.inf") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="ntuser.dat") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="iconcache.db") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="bootsect.bak") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="boot.ini") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="bootfont.bin") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="config.sys") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="io.sys") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="msdos.sys") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="ntuser.dat.log") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="thumbs.db") returned 0x0
	[0117.178] StrStrW (lpFirst="msn entertainment.url", lpSrch="swapfile.sys") returned 0x0
	[0117.178] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0117.185] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0117.185] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.185] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.197] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0117.197] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.197] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0117.199] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.199] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0117.199] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.200] GetLastError () returned 0x3e5
	[0117.200] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.201] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
	[0117.201] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0117.201] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.201] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0117.201] StrStrW (lpFirst="msn money.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.201] StrStrW (lpFirst="msn money.url", lpSrch="ntldr") returned 0x0
	[0117.201] StrStrW (lpFirst="msn money.url", lpSrch="pagefile.sys") returned 0x0
	[0117.201] StrStrW (lpFirst="msn money.url", lpSrch="ntdetect.com") returned 0x0
	[0117.201] StrStrW (lpFirst="msn money.url", lpSrch="autoexec.bat") returned 0x0
	[0117.201] StrStrW (lpFirst="msn money.url", lpSrch="desktop.ini") returned 0x0
	[0117.201] StrStrW (lpFirst="msn money.url", lpSrch="autorun.inf") returned 0x0
	[0117.201] StrStrW (lpFirst="msn money.url", lpSrch="ntuser.dat") returned 0x0
	[0117.201] StrStrW (lpFirst="msn money.url", lpSrch="iconcache.db") returned 0x0
	[0117.201] StrStrW (lpFirst="msn money.url", lpSrch="bootsect.bak") returned 0x0
	[0117.201] StrStrW (lpFirst="msn money.url", lpSrch="boot.ini") returned 0x0
	[0117.202] StrStrW (lpFirst="msn money.url", lpSrch="bootfont.bin") returned 0x0
	[0117.202] StrStrW (lpFirst="msn money.url", lpSrch="config.sys") returned 0x0
	[0117.202] StrStrW (lpFirst="msn money.url", lpSrch="io.sys") returned 0x0
	[0117.202] StrStrW (lpFirst="msn money.url", lpSrch="msdos.sys") returned 0x0
	[0117.202] StrStrW (lpFirst="msn money.url", lpSrch="ntuser.dat.log") returned 0x0
	[0117.202] StrStrW (lpFirst="msn money.url", lpSrch="thumbs.db") returned 0x0
	[0117.202] StrStrW (lpFirst="msn money.url", lpSrch="swapfile.sys") returned 0x0
	[0117.202] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0117.208] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0117.208] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.208] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.221] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0117.221] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.221] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0117.222] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.222] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0117.222] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0117.230] GetLastError () returned 0x3e5
	[0117.230] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.230] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
	[0117.231] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0117.231] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.231] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="ntldr") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="pagefile.sys") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="ntdetect.com") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="autoexec.bat") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="desktop.ini") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="autorun.inf") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="ntuser.dat") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="iconcache.db") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="bootsect.bak") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="boot.ini") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="bootfont.bin") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="config.sys") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="io.sys") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="msdos.sys") returned 0x0
	[0117.231] StrStrW (lpFirst="msn sports.url", lpSrch="ntuser.dat.log") returned 0x0
	[0117.232] StrStrW (lpFirst="msn sports.url", lpSrch="thumbs.db") returned 0x0
	[0117.232] StrStrW (lpFirst="msn sports.url", lpSrch="swapfile.sys") returned 0x0
	[0117.232] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0117.235] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0117.235] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.235] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.248] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0117.248] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.248] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0117.249] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.249] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0117.249] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0117.258] GetLastError () returned 0x3e5
	[0117.258] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.258] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
	[0117.258] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0117.259] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.259] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="ntldr") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="pagefile.sys") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="ntdetect.com") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="autoexec.bat") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="desktop.ini") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="autorun.inf") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="ntuser.dat") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="iconcache.db") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="bootsect.bak") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="boot.ini") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="bootfont.bin") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="config.sys") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="io.sys") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="msdos.sys") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="ntuser.dat.log") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="thumbs.db") returned 0x0
	[0117.259] StrStrW (lpFirst="msn.url", lpSrch="swapfile.sys") returned 0x0
	[0117.259] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0117.260] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0117.260] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.260] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.270] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0117.270] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.270] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0117.271] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.271] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.271] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0117.334] GetLastError () returned 0x3e5
	[0117.334] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.334] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
	[0117.334] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0117.334] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.334] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0117.334] StrStrW (lpFirst="msnbc news.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.334] StrStrW (lpFirst="msnbc news.url", lpSrch="ntldr") returned 0x0
	[0117.334] StrStrW (lpFirst="msnbc news.url", lpSrch="pagefile.sys") returned 0x0
	[0117.334] StrStrW (lpFirst="msnbc news.url", lpSrch="ntdetect.com") returned 0x0
	[0117.334] StrStrW (lpFirst="msnbc news.url", lpSrch="autoexec.bat") returned 0x0
	[0117.334] StrStrW (lpFirst="msnbc news.url", lpSrch="desktop.ini") returned 0x0
	[0117.334] StrStrW (lpFirst="msnbc news.url", lpSrch="autorun.inf") returned 0x0
	[0117.334] StrStrW (lpFirst="msnbc news.url", lpSrch="ntuser.dat") returned 0x0
	[0117.334] StrStrW (lpFirst="msnbc news.url", lpSrch="iconcache.db") returned 0x0
	[0117.335] StrStrW (lpFirst="msnbc news.url", lpSrch="bootsect.bak") returned 0x0
	[0117.335] StrStrW (lpFirst="msnbc news.url", lpSrch="boot.ini") returned 0x0
	[0117.335] StrStrW (lpFirst="msnbc news.url", lpSrch="bootfont.bin") returned 0x0
	[0117.335] StrStrW (lpFirst="msnbc news.url", lpSrch="config.sys") returned 0x0
	[0117.335] StrStrW (lpFirst="msnbc news.url", lpSrch="io.sys") returned 0x0
	[0117.335] StrStrW (lpFirst="msnbc news.url", lpSrch="msdos.sys") returned 0x0
	[0117.335] StrStrW (lpFirst="msnbc news.url", lpSrch="ntuser.dat.log") returned 0x0
	[0117.335] StrStrW (lpFirst="msnbc news.url", lpSrch="thumbs.db") returned 0x0
	[0117.335] StrStrW (lpFirst="msnbc news.url", lpSrch="swapfile.sys") returned 0x0
	[0117.335] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0117.522] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0117.522] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.522] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.536] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0117.536] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.536] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0117.537] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.537] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.537] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.539] GetLastError () returned 0x3e5
	[0117.539] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.539] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="msnbc news.url", cAlternateFileName="MSNBCN~1.URL")) returned 0
	[0117.539] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0117.540] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0117.540] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0117.540] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.540] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526478 | out: hHeap=0x5f0000) returned 1
	[0117.540] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c4
	[0117.541] WriteFile (in: hFile=0x3c4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0117.542] CloseHandle (hObject=0x3c4) returned 1
	[0117.542] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.542] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0117.542] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0117.542] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0117.542] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
	[0117.542] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0117.542] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0117.543] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0117.543] lstrcmpW (lpString1="..", lpString2="Windows Live") returned -1
	[0117.543] lstrcmpW (lpString1=".", lpString2="Windows Live") returned -1
	[0117.543] StrStrW (lpFirst="windows live", lpSrch="programdata") returned 0x0
	[0117.543] StrStrW (lpFirst="windows live", lpSrch="$recycle.bin") returned 0x0
	[0117.543] StrStrW (lpFirst="windows live", lpSrch="program files") returned 0x0
	[0117.543] StrStrW (lpFirst="windows live", lpSrch="windows") returned="windows live"
	[0117.543] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0117.543] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="windows live", cAlternateFileName="WINDOW~1")) returned 0
	[0117.543] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0117.543] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0117.543] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0117.543] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0117.543] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0117.543] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0117.544] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0117.545] CloseHandle (hObject=0x3bc) returned 1
	[0117.546] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0117.546] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0117.546] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0117.546] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0117.546] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0117.546] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0117.546] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0117.546] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0117.546] lstrcmpW (lpString1="..", lpString2="Links") returned -1
	[0117.546] lstrcmpW (lpString1=".", lpString2="Links") returned -1
	[0117.546] StrStrW (lpFirst="links", lpSrch="programdata") returned 0x0
	[0117.546] StrStrW (lpFirst="links", lpSrch="$recycle.bin") returned 0x0
	[0117.546] StrStrW (lpFirst="links", lpSrch="program files") returned 0x0
	[0117.546] StrStrW (lpFirst="links", lpSrch="windows") returned 0x0
	[0117.547] StrStrW (lpFirst="links", lpSrch="all users") returned 0x0
	[0117.547] StrStrW (lpFirst="links", lpSrch="winnt") returned 0x0
	[0117.547] StrStrW (lpFirst="links", lpSrch="appdata") returned 0x0
	[0117.547] StrStrW (lpFirst="links", lpSrch="application data") returned 0x0
	[0117.547] StrStrW (lpFirst="links", lpSrch="local settings") returned 0x0
	[0117.547] StrStrW (lpFirst="links", lpSrch="boot") returned 0x0
	[0117.547] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0117.547] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.547] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0117.547] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.547] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.547] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0117.547] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0117.547] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.547] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0117.547] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.548] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0117.548] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.548] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0117.548] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.548] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0117.548] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.548] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.548] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0117.548] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0117.548] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0117.548] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0117.548] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0117.548] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0117.548] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0117.548] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.548] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0117.548] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="ntldr") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="pagefile.sys") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="ntdetect.com") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="autoexec.bat") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="desktop.ini") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="autorun.inf") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="ntuser.dat") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="iconcache.db") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="bootsect.bak") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="boot.ini") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="bootfont.bin") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="config.sys") returned 0x0
	[0117.549] StrStrW (lpFirst="desktop.lnk", lpSrch="io.sys") returned 0x0
	[0117.550] StrStrW (lpFirst="desktop.lnk", lpSrch="msdos.sys") returned 0x0
	[0117.550] StrStrW (lpFirst="desktop.lnk", lpSrch="ntuser.dat.log") returned 0x0
	[0117.550] StrStrW (lpFirst="desktop.lnk", lpSrch="thumbs.db") returned 0x0
	[0117.550] StrStrW (lpFirst="desktop.lnk", lpSrch="swapfile.sys") returned 0x0
	[0117.550] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0117.564] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=486) returned 1
	[0117.564] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.564] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.576] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0117.576] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.576] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0117.577] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0117.577] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.577] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.578] GetLastError () returned 0x3e5
	[0117.579] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0117.579] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0117.579] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.579] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0117.579] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="ntldr") returned 0x0
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="pagefile.sys") returned 0x0
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="ntdetect.com") returned 0x0
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="autoexec.bat") returned 0x0
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="desktop.ini") returned 0x0
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="autorun.inf") returned 0x0
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="ntuser.dat") returned 0x0
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="iconcache.db") returned 0x0
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="bootsect.bak") returned 0x0
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="boot.ini") returned 0x0
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="bootfont.bin") returned 0x0
	[0117.579] StrStrW (lpFirst="downloads.lnk", lpSrch="config.sys") returned 0x0
	[0117.580] StrStrW (lpFirst="downloads.lnk", lpSrch="io.sys") returned 0x0
	[0117.580] StrStrW (lpFirst="downloads.lnk", lpSrch="msdos.sys") returned 0x0
	[0117.580] StrStrW (lpFirst="downloads.lnk", lpSrch="ntuser.dat.log") returned 0x0
	[0117.580] StrStrW (lpFirst="downloads.lnk", lpSrch="thumbs.db") returned 0x0
	[0117.580] StrStrW (lpFirst="downloads.lnk", lpSrch="swapfile.sys") returned 0x0
	[0117.580] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0117.580] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=929) returned 1
	[0117.580] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.580] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0117.595] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0117.596] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0117.596] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0117.597] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0117.597] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.597] ReadFile (in: hFile=0x3c4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0117.604] GetLastError () returned 0x3e5
	[0117.604] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0117.604] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1
	[0117.604] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.604] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0117.604] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.604] StrStrW (lpFirst="recentplaces.lnk", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.604] StrStrW (lpFirst="recentplaces.lnk", lpSrch="ntldr") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="pagefile.sys") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="ntdetect.com") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="autoexec.bat") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="desktop.ini") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="autorun.inf") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="ntuser.dat") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="iconcache.db") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="bootsect.bak") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="boot.ini") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="bootfont.bin") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="config.sys") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="io.sys") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="msdos.sys") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="ntuser.dat.log") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="thumbs.db") returned 0x0
	[0117.605] StrStrW (lpFirst="recentplaces.lnk", lpSrch="swapfile.sys") returned 0x0
	[0117.605] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0117.614] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=363) returned 1
	[0117.614] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.614] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.627] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0117.627] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d220
	[0117.627] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0117.628] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0117.628] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0117.628] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0117.629] GetLastError () returned 0x3e5
	[0117.629] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0117.629] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="recentplaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0
	[0117.630] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0117.630] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0117.630] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.630] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0117.630] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.630] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0117.630] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0117.632] CloseHandle (hObject=0x3bc) returned 1
	[0117.632] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0117.632] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0117.632] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0117.632] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0117.632] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0117.633] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0117.633] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0117.633] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0117.633] lstrcmpW (lpString1="..", lpString2="Local Settings") returned -1
	[0117.633] lstrcmpW (lpString1=".", lpString2="Local Settings") returned -1
	[0117.633] StrStrW (lpFirst="local settings", lpSrch="programdata") returned 0x0
	[0117.633] StrStrW (lpFirst="local settings", lpSrch="$recycle.bin") returned 0x0
	[0117.633] StrStrW (lpFirst="local settings", lpSrch="program files") returned 0x0
	[0117.633] StrStrW (lpFirst="local settings", lpSrch="windows") returned 0x0
	[0117.633] StrStrW (lpFirst="local settings", lpSrch="all users") returned 0x0
	[0117.633] StrStrW (lpFirst="local settings", lpSrch="winnt") returned 0x0
	[0117.633] StrStrW (lpFirst="local settings", lpSrch="appdata") returned 0x0
	[0117.633] StrStrW (lpFirst="local settings", lpSrch="application data") returned 0x0
	[0117.633] StrStrW (lpFirst="local settings", lpSrch="local settings") returned="local settings"
	[0117.633] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0117.633] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc1e5700, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc1e5700, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0117.633] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0117.633] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0117.633] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0117.634] lstrcmpW (lpString1="..", lpString2="Music") returned -1
	[0117.634] lstrcmpW (lpString1=".", lpString2="Music") returned -1
	[0117.634] StrStrW (lpFirst="music", lpSrch="programdata") returned 0x0
	[0117.634] StrStrW (lpFirst="music", lpSrch="$recycle.bin") returned 0x0
	[0117.634] StrStrW (lpFirst="music", lpSrch="program files") returned 0x0
	[0117.634] StrStrW (lpFirst="music", lpSrch="windows") returned 0x0
	[0117.634] StrStrW (lpFirst="music", lpSrch="all users") returned 0x0
	[0117.634] StrStrW (lpFirst="music", lpSrch="winnt") returned 0x0
	[0117.634] StrStrW (lpFirst="music", lpSrch="appdata") returned 0x0
	[0117.634] StrStrW (lpFirst="music", lpSrch="application data") returned 0x0
	[0117.634] StrStrW (lpFirst="music", lpSrch="local settings") returned 0x0
	[0117.634] StrStrW (lpFirst="music", lpSrch="boot") returned 0x0
	[0117.634] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0117.634] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.634] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc1e5700, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc1e5700, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0117.634] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.635] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.635] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0117.635] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0117.635] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.635] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc1e5700, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc1e5700, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0117.635] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.635] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0117.635] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.635] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x657bc960, ftCreationTime.dwHighDateTime=0x1d5df1b, ftLastAccessTime.dwLowDateTime=0xf2e3c880, ftLastAccessTime.dwHighDateTime=0x1d5d96b, ftLastWriteTime.dwLowDateTime=0xf2e3c880, ftLastWriteTime.dwHighDateTime=0x1d5d96b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5k272oFhyqM0yt7I", cAlternateFileName="5K272O~1")) returned 1
	[0117.635] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.635] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0117.635] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.635] lstrcmpW (lpString1="..", lpString2="5k272oFhyqM0yt7I") returned -1
	[0117.635] lstrcmpW (lpString1=".", lpString2="5k272oFhyqM0yt7I") returned -1
	[0117.635] StrStrW (lpFirst="5k272ofhyqm0yt7i", lpSrch="programdata") returned 0x0
	[0117.635] StrStrW (lpFirst="5k272ofhyqm0yt7i", lpSrch="$recycle.bin") returned 0x0
	[0117.635] StrStrW (lpFirst="5k272ofhyqm0yt7i", lpSrch="program files") returned 0x0
	[0117.635] StrStrW (lpFirst="5k272ofhyqm0yt7i", lpSrch="windows") returned 0x0
	[0117.635] StrStrW (lpFirst="5k272ofhyqm0yt7i", lpSrch="all users") returned 0x0
	[0117.635] StrStrW (lpFirst="5k272ofhyqm0yt7i", lpSrch="winnt") returned 0x0
	[0117.636] StrStrW (lpFirst="5k272ofhyqm0yt7i", lpSrch="appdata") returned 0x0
	[0117.636] StrStrW (lpFirst="5k272ofhyqm0yt7i", lpSrch="application data") returned 0x0
	[0117.636] StrStrW (lpFirst="5k272ofhyqm0yt7i", lpSrch="local settings") returned 0x0
	[0117.636] StrStrW (lpFirst="5k272ofhyqm0yt7i", lpSrch="boot") returned 0x0
	[0117.636] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0117.636] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0117.636] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5k272oFhyqM0yt7I\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x657bc960, ftCreationTime.dwHighDateTime=0x1d5df1b, ftLastAccessTime.dwLowDateTime=0xf2e3c880, ftLastAccessTime.dwHighDateTime=0x1d5d96b, ftLastWriteTime.dwLowDateTime=0xf2e3c880, ftLastWriteTime.dwHighDateTime=0x1d5d96b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0117.636] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0117.636] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0117.636] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0117.636] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0117.636] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0117.636] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x657bc960, ftCreationTime.dwHighDateTime=0x1d5df1b, ftLastAccessTime.dwLowDateTime=0xf2e3c880, ftLastAccessTime.dwHighDateTime=0x1d5d96b, ftLastWriteTime.dwLowDateTime=0xf2e3c880, ftLastWriteTime.dwHighDateTime=0x1d5d96b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0117.636] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0117.636] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.636] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0117.636] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0117.636] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.637] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14dccbe0, ftCreationTime.dwHighDateTime=0x1d5e069, ftLastAccessTime.dwLowDateTime=0xa328baf0, ftLastAccessTime.dwHighDateTime=0x1d5e062, ftLastWriteTime.dwLowDateTime=0xa328baf0, ftLastWriteTime.dwHighDateTime=0x1d5e062, nFileSizeHigh=0x0, nFileSizeLow=0x124f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="f6QnSQ6d.mp3", cAlternateFileName="")) returned 1
	[0117.637] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0117.637] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.637] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="ntldr") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="pagefile.sys") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="ntdetect.com") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="autoexec.bat") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="desktop.ini") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="autorun.inf") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="ntuser.dat") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="iconcache.db") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="bootsect.bak") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="boot.ini") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="bootfont.bin") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="config.sys") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="io.sys") returned 0x0
	[0117.637] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="msdos.sys") returned 0x0
	[0117.638] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0117.638] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="thumbs.db") returned 0x0
	[0117.638] StrStrW (lpFirst="f6qnsq6d.mp3", lpSrch="swapfile.sys") returned 0x0
	[0117.638] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5k272oFhyqM0yt7I\\f6QnSQ6d.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5k272ofhyqm0yt7i\\f6qnsq6d.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0117.638] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=75001) returned 1
	[0117.638] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.638] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0117.715] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0117.715] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.715] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0117.716] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.716] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.716] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0117.726] GetLastError () returned 0x3e5
	[0117.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.728] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x598c7390, ftCreationTime.dwHighDateTime=0x1d5e6df, ftLastAccessTime.dwLowDateTime=0x631981b0, ftLastAccessTime.dwHighDateTime=0x1d5e445, ftLastWriteTime.dwLowDateTime=0x631981b0, ftLastWriteTime.dwHighDateTime=0x1d5e445, nFileSizeHigh=0x0, nFileSizeLow=0x80a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IltPMZE.mp3", cAlternateFileName="")) returned 1
	[0117.728] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0117.728] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.728] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0117.728] StrStrW (lpFirst="iltpmze.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.728] StrStrW (lpFirst="iltpmze.mp3", lpSrch="ntldr") returned 0x0
	[0117.728] StrStrW (lpFirst="iltpmze.mp3", lpSrch="pagefile.sys") returned 0x0
	[0117.728] StrStrW (lpFirst="iltpmze.mp3", lpSrch="ntdetect.com") returned 0x0
	[0117.728] StrStrW (lpFirst="iltpmze.mp3", lpSrch="autoexec.bat") returned 0x0
	[0117.728] StrStrW (lpFirst="iltpmze.mp3", lpSrch="desktop.ini") returned 0x0
	[0117.728] StrStrW (lpFirst="iltpmze.mp3", lpSrch="autorun.inf") returned 0x0
	[0117.728] StrStrW (lpFirst="iltpmze.mp3", lpSrch="ntuser.dat") returned 0x0
	[0117.729] StrStrW (lpFirst="iltpmze.mp3", lpSrch="iconcache.db") returned 0x0
	[0117.729] StrStrW (lpFirst="iltpmze.mp3", lpSrch="bootsect.bak") returned 0x0
	[0117.729] StrStrW (lpFirst="iltpmze.mp3", lpSrch="boot.ini") returned 0x0
	[0117.729] StrStrW (lpFirst="iltpmze.mp3", lpSrch="bootfont.bin") returned 0x0
	[0117.729] StrStrW (lpFirst="iltpmze.mp3", lpSrch="config.sys") returned 0x0
	[0117.729] StrStrW (lpFirst="iltpmze.mp3", lpSrch="io.sys") returned 0x0
	[0117.729] StrStrW (lpFirst="iltpmze.mp3", lpSrch="msdos.sys") returned 0x0
	[0117.729] StrStrW (lpFirst="iltpmze.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0117.729] StrStrW (lpFirst="iltpmze.mp3", lpSrch="thumbs.db") returned 0x0
	[0117.729] StrStrW (lpFirst="iltpmze.mp3", lpSrch="swapfile.sys") returned 0x0
	[0117.729] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5k272oFhyqM0yt7I\\IltPMZE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5k272ofhyqm0yt7i\\iltpmze.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0117.729] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=32936) returned 1
	[0117.729] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.729] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.739] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0117.739] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.739] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0117.741] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.741] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.741] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0117.748] GetLastError () returned 0x3e5
	[0117.748] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.749] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa221540, ftCreationTime.dwHighDateTime=0x1d5e49a, ftLastAccessTime.dwLowDateTime=0xc114a040, ftLastAccessTime.dwHighDateTime=0x1d5e2da, ftLastWriteTime.dwLowDateTime=0xc114a040, ftLastWriteTime.dwHighDateTime=0x1d5e2da, nFileSizeHigh=0x0, nFileSizeLow=0x108cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vc-t29By6hfo-iZj2XDg.m4a", cAlternateFileName="VC-T29~1.M4A")) returned 1
	[0117.749] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0117.749] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.749] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="ntldr") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="pagefile.sys") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="ntdetect.com") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="autoexec.bat") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="desktop.ini") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="autorun.inf") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="ntuser.dat") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="iconcache.db") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="bootsect.bak") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="boot.ini") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="bootfont.bin") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="config.sys") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="io.sys") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="msdos.sys") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="ntuser.dat.log") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="thumbs.db") returned 0x0
	[0117.749] StrStrW (lpFirst="vc-t29by6hfo-izj2xdg.m4a", lpSrch="swapfile.sys") returned 0x0
	[0117.749] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5k272oFhyqM0yt7I\\Vc-t29By6hfo-iZj2XDg.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5k272ofhyqm0yt7i\\vc-t29by6hfo-izj2xdg.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0117.750] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=67791) returned 1
	[0117.750] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.750] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.760] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0117.760] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.760] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0117.761] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0117.761] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.761] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0117.769] GetLastError () returned 0x3e5
	[0117.769] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.769] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa221540, ftCreationTime.dwHighDateTime=0x1d5e49a, ftLastAccessTime.dwLowDateTime=0xc114a040, ftLastAccessTime.dwHighDateTime=0x1d5e2da, ftLastWriteTime.dwLowDateTime=0xc114a040, ftLastWriteTime.dwHighDateTime=0x1d5e2da, nFileSizeHigh=0x0, nFileSizeLow=0x108cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc-t29by6hfo-izj2xdg.m4a", cAlternateFileName="VC-T29~1.M4A")) returned 0
	[0117.769] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0117.769] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0117.769] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0117.769] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.769] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0117.769] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5k272oFhyqM0yt7I\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5k272ofhyqm0yt7i\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0117.769] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0117.770] CloseHandle (hObject=0x3d8) returned 1
	[0117.771] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0117.771] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0117.771] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0117.771] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0117.771] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x299b6de0, ftCreationTime.dwHighDateTime=0x1d5e16b, ftLastAccessTime.dwLowDateTime=0xe3c70000, ftLastAccessTime.dwHighDateTime=0x1d5dd8b, ftLastWriteTime.dwLowDateTime=0xe3c70000, ftLastWriteTime.dwHighDateTime=0x1d5dd8b, nFileSizeHigh=0x0, nFileSizeLow=0x15c5c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8a8QTID8m0a.mp3", cAlternateFileName="8A8QTI~1.MP3")) returned 1
	[0117.771] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.771] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0117.771] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="ntldr") returned 0x0
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="pagefile.sys") returned 0x0
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="ntdetect.com") returned 0x0
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="autoexec.bat") returned 0x0
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="desktop.ini") returned 0x0
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="autorun.inf") returned 0x0
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="ntuser.dat") returned 0x0
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="iconcache.db") returned 0x0
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="bootsect.bak") returned 0x0
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="boot.ini") returned 0x0
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="bootfont.bin") returned 0x0
	[0117.771] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="config.sys") returned 0x0
	[0117.772] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="io.sys") returned 0x0
	[0117.772] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="msdos.sys") returned 0x0
	[0117.772] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0117.772] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="thumbs.db") returned 0x0
	[0117.772] StrStrW (lpFirst="8a8qtid8m0a.mp3", lpSrch="swapfile.sys") returned 0x0
	[0117.772] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8a8QTID8m0a.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8a8qtid8m0a.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0117.772] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=89180) returned 1
	[0117.772] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.772] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.782] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0117.782] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.782] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0117.783] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0117.783] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0117.783] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0117.794] GetLastError () returned 0x3e5
	[0117.794] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0117.794] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02715b0, ftCreationTime.dwHighDateTime=0x1d5d9bc, ftLastAccessTime.dwLowDateTime=0x195368f0, ftLastAccessTime.dwHighDateTime=0x1d5e1b3, ftLastWriteTime.dwLowDateTime=0x195368f0, ftLastWriteTime.dwHighDateTime=0x1d5e1b3, nFileSizeHigh=0x0, nFileSizeLow=0x6bf0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9KugnplPwxU uN1T.mp3", cAlternateFileName="9KUGNP~1.MP3")) returned 1
	[0117.794] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.794] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.795] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="ntldr") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="pagefile.sys") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="ntdetect.com") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="autoexec.bat") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="desktop.ini") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="autorun.inf") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="ntuser.dat") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="iconcache.db") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="bootsect.bak") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="boot.ini") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="bootfont.bin") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="config.sys") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="io.sys") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="msdos.sys") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="thumbs.db") returned 0x0
	[0117.795] StrStrW (lpFirst="9kugnplpwxu un1t.mp3", lpSrch="swapfile.sys") returned 0x0
	[0117.796] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\9KugnplPwxU uN1T.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\9kugnplpwxu un1t.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0117.796] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=27632) returned 1
	[0117.796] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.796] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.808] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0117.808] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.808] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633198) returned 1
	[0117.809] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0117.809] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0117.809] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0117.816] GetLastError () returned 0x3e5
	[0117.816] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.816] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0117.816] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.816] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0117.816] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.817] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.817] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0117.817] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0117.817] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0117.817] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0117.817] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0117.817] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0117.817] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c25b2d0, ftCreationTime.dwHighDateTime=0x1d5e745, ftLastAccessTime.dwLowDateTime=0xda6a7d50, ftLastAccessTime.dwHighDateTime=0x1d5ddec, ftLastWriteTime.dwLowDateTime=0xda6a7d50, ftLastWriteTime.dwHighDateTime=0x1d5ddec, nFileSizeHigh=0x0, nFileSizeLow=0xc531, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IXq9U17GbHn-s4w_7.m4a", cAlternateFileName="IXQ9U1~1.M4A")) returned 1
	[0117.817] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.817] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.817] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.817] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.817] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="ntldr") returned 0x0
	[0117.817] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="pagefile.sys") returned 0x0
	[0117.817] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="ntdetect.com") returned 0x0
	[0117.817] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="autoexec.bat") returned 0x0
	[0117.817] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="desktop.ini") returned 0x0
	[0117.817] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="autorun.inf") returned 0x0
	[0117.817] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="ntuser.dat") returned 0x0
	[0117.817] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="iconcache.db") returned 0x0
	[0117.818] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="bootsect.bak") returned 0x0
	[0117.818] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="boot.ini") returned 0x0
	[0117.818] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="bootfont.bin") returned 0x0
	[0117.818] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="config.sys") returned 0x0
	[0117.818] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="io.sys") returned 0x0
	[0117.818] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="msdos.sys") returned 0x0
	[0117.818] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="ntuser.dat.log") returned 0x0
	[0117.818] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="thumbs.db") returned 0x0
	[0117.818] StrStrW (lpFirst="ixq9u17gbhn-s4w_7.m4a", lpSrch="swapfile.sys") returned 0x0
	[0117.818] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\IXq9U17GbHn-s4w_7.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ixq9u17gbhn-s4w_7.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0117.818] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=50481) returned 1
	[0117.818] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.818] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.831] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0117.831] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.831] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0117.832] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0117.832] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0117.832] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0117.840] GetLastError () returned 0x3e5
	[0117.840] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0117.840] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3783d0, ftCreationTime.dwHighDateTime=0x1d5dab8, ftLastAccessTime.dwLowDateTime=0x3d6bbd10, ftLastAccessTime.dwHighDateTime=0x1d5dd2f, ftLastWriteTime.dwLowDateTime=0x3d6bbd10, ftLastWriteTime.dwHighDateTime=0x1d5dd2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QLs1xK", cAlternateFileName="")) returned 1
	[0117.840] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0117.840] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0117.840] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0117.840] lstrcmpW (lpString1="..", lpString2="QLs1xK") returned -1
	[0117.840] lstrcmpW (lpString1=".", lpString2="QLs1xK") returned -1
	[0117.840] StrStrW (lpFirst="qls1xk", lpSrch="programdata") returned 0x0
	[0117.840] StrStrW (lpFirst="qls1xk", lpSrch="$recycle.bin") returned 0x0
	[0117.840] StrStrW (lpFirst="qls1xk", lpSrch="program files") returned 0x0
	[0117.840] StrStrW (lpFirst="qls1xk", lpSrch="windows") returned 0x0
	[0117.840] StrStrW (lpFirst="qls1xk", lpSrch="all users") returned 0x0
	[0117.840] StrStrW (lpFirst="qls1xk", lpSrch="winnt") returned 0x0
	[0117.840] StrStrW (lpFirst="qls1xk", lpSrch="appdata") returned 0x0
	[0117.840] StrStrW (lpFirst="qls1xk", lpSrch="application data") returned 0x0
	[0117.840] StrStrW (lpFirst="qls1xk", lpSrch="local settings") returned 0x0
	[0117.840] StrStrW (lpFirst="qls1xk", lpSrch="boot") returned 0x0
	[0117.840] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0117.841] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0117.841] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3783d0, ftCreationTime.dwHighDateTime=0x1d5dab8, ftLastAccessTime.dwLowDateTime=0x3d6bbd10, ftLastAccessTime.dwHighDateTime=0x1d5dd2f, ftLastWriteTime.dwLowDateTime=0x3d6bbd10, ftLastWriteTime.dwHighDateTime=0x1d5dd2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0117.841] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0117.841] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0117.841] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0117.841] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0117.841] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0117.841] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e3783d0, ftCreationTime.dwHighDateTime=0x1d5dab8, ftLastAccessTime.dwLowDateTime=0x3d6bbd10, ftLastAccessTime.dwHighDateTime=0x1d5dd2f, ftLastWriteTime.dwLowDateTime=0x3d6bbd10, ftLastWriteTime.dwHighDateTime=0x1d5dd2f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0117.841] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0117.841] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0117.841] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0117.841] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd29e300, ftCreationTime.dwHighDateTime=0x1d5e12f, ftLastAccessTime.dwLowDateTime=0x1c3251d0, ftLastAccessTime.dwHighDateTime=0x1d5e799, ftLastWriteTime.dwLowDateTime=0x1c3251d0, ftLastWriteTime.dwHighDateTime=0x1d5e799, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JXWmkX", cAlternateFileName="")) returned 1
	[0117.841] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0117.841] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0117.841] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0117.841] lstrcmpW (lpString1="..", lpString2="JXWmkX") returned -1
	[0117.841] lstrcmpW (lpString1=".", lpString2="JXWmkX") returned -1
	[0117.841] StrStrW (lpFirst="jxwmkx", lpSrch="programdata") returned 0x0
	[0117.841] StrStrW (lpFirst="jxwmkx", lpSrch="$recycle.bin") returned 0x0
	[0117.841] StrStrW (lpFirst="jxwmkx", lpSrch="program files") returned 0x0
	[0117.842] StrStrW (lpFirst="jxwmkx", lpSrch="windows") returned 0x0
	[0117.842] StrStrW (lpFirst="jxwmkx", lpSrch="all users") returned 0x0
	[0117.842] StrStrW (lpFirst="jxwmkx", lpSrch="winnt") returned 0x0
	[0117.842] StrStrW (lpFirst="jxwmkx", lpSrch="appdata") returned 0x0
	[0117.842] StrStrW (lpFirst="jxwmkx", lpSrch="application data") returned 0x0
	[0117.842] StrStrW (lpFirst="jxwmkx", lpSrch="local settings") returned 0x0
	[0117.842] StrStrW (lpFirst="jxwmkx", lpSrch="boot") returned 0x0
	[0117.842] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0117.842] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0117.842] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\*", lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd29e300, ftCreationTime.dwHighDateTime=0x1d5e12f, ftLastAccessTime.dwLowDateTime=0x1c3251d0, ftLastAccessTime.dwHighDateTime=0x1d5e799, ftLastWriteTime.dwLowDateTime=0x1c3251d0, ftLastWriteTime.dwHighDateTime=0x1d5e799, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e950
	[0117.842] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0117.842] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0117.842] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0117.842] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0117.842] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0117.842] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd29e300, ftCreationTime.dwHighDateTime=0x1d5e12f, ftLastAccessTime.dwLowDateTime=0x1c3251d0, ftLastAccessTime.dwHighDateTime=0x1d5e799, ftLastWriteTime.dwLowDateTime=0x1c3251d0, ftLastWriteTime.dwHighDateTime=0x1d5e799, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0117.842] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0117.842] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0117.842] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0117.842] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x471a84e0, ftCreationTime.dwHighDateTime=0x1d5e365, ftLastAccessTime.dwLowDateTime=0xcbfe7d00, ftLastAccessTime.dwHighDateTime=0x1d5e5d7, ftLastWriteTime.dwLowDateTime=0xcbfe7d00, ftLastWriteTime.dwHighDateTime=0x1d5e5d7, nFileSizeHigh=0x0, nFileSizeLow=0xbab1, dwReserved0=0x0, dwReserved1=0x0, cFileName="-vymBKk.m4a", cAlternateFileName="")) returned 1
	[0117.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0117.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0117.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="ntldr") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="pagefile.sys") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="ntdetect.com") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="autoexec.bat") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="desktop.ini") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="autorun.inf") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="ntuser.dat") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="iconcache.db") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="bootsect.bak") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="boot.ini") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="bootfont.bin") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="config.sys") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="io.sys") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="msdos.sys") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="ntuser.dat.log") returned 0x0
	[0117.843] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="thumbs.db") returned 0x0
	[0117.844] StrStrW (lpFirst="-vymbkk.m4a", lpSrch="swapfile.sys") returned 0x0
	[0117.844] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\-vymBKk.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\-vymbkk.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0117.844] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=47793) returned 1
	[0117.844] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0117.844] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0117.856] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0117.856] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0117.857] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633220) returned 1
	[0117.858] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0117.858] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0117.858] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0118.055] GetLastError () returned 0x3e5
	[0118.055] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0118.055] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10c6a770, ftCreationTime.dwHighDateTime=0x1d5dfa5, ftLastAccessTime.dwLowDateTime=0x53056a0, ftLastAccessTime.dwHighDateTime=0x1d5e733, ftLastWriteTime.dwLowDateTime=0x53056a0, ftLastWriteTime.dwHighDateTime=0x1d5e733, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x0, dwReserved1=0x0, cFileName="7Y6RFTBxGqHtaBV.mp3", cAlternateFileName="7Y6RFT~1.MP3")) returned 1
	[0118.056] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0118.056] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0118.056] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="ntldr") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="pagefile.sys") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="ntdetect.com") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="autoexec.bat") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="desktop.ini") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="autorun.inf") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="ntuser.dat") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="iconcache.db") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="bootsect.bak") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="boot.ini") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="bootfont.bin") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="config.sys") returned 0x0
	[0118.056] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="io.sys") returned 0x0
	[0118.057] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="msdos.sys") returned 0x0
	[0118.057] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0118.057] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="thumbs.db") returned 0x0
	[0118.057] StrStrW (lpFirst="7y6rftbxgqhtabv.mp3", lpSrch="swapfile.sys") returned 0x0
	[0118.057] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\7Y6RFTBxGqHtaBV.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\7y6rftbxgqhtabv.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0118.057] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=5920) returned 1
	[0118.057] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.057] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0118.071] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0118.071] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0118.071] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633220) returned 1
	[0118.072] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0118.072] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0118.072] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0118.093] GetLastError () returned 0x3e5
	[0118.093] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0118.093] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35622940, ftCreationTime.dwHighDateTime=0x1d5dc69, ftLastAccessTime.dwLowDateTime=0x9617c290, ftLastAccessTime.dwHighDateTime=0x1d5d8fe, ftLastWriteTime.dwLowDateTime=0x9617c290, ftLastWriteTime.dwHighDateTime=0x1d5d8fe, nFileSizeHigh=0x0, nFileSizeLow=0x1a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="faFVh.mp3", cAlternateFileName="")) returned 1
	[0118.094] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0118.094] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0118.094] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="ntldr") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="pagefile.sys") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="ntdetect.com") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="autoexec.bat") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="desktop.ini") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="autorun.inf") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="ntuser.dat") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="iconcache.db") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="bootsect.bak") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="boot.ini") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="bootfont.bin") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="config.sys") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="io.sys") returned 0x0
	[0118.094] StrStrW (lpFirst="fafvh.mp3", lpSrch="msdos.sys") returned 0x0
	[0118.095] StrStrW (lpFirst="fafvh.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0118.095] StrStrW (lpFirst="fafvh.mp3", lpSrch="thumbs.db") returned 0x0
	[0118.095] StrStrW (lpFirst="fafvh.mp3", lpSrch="swapfile.sys") returned 0x0
	[0118.095] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\faFVh.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fafvh.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0118.095] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=6804) returned 1
	[0118.095] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.095] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0118.108] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0118.108] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0118.108] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0118.109] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0118.109] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.109] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0118.119] GetLastError () returned 0x3e5
	[0118.119] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0118.119] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77441cc0, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x71c226f0, ftLastAccessTime.dwHighDateTime=0x1d5e64c, ftLastWriteTime.dwLowDateTime=0x71c226f0, ftLastWriteTime.dwHighDateTime=0x1d5e64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FmHlph98Kx4634Gw6S", cAlternateFileName="FMHLPH~1")) returned 1
	[0118.119] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0118.119] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0118.119] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0118.119] lstrcmpW (lpString1="..", lpString2="FmHlph98Kx4634Gw6S") returned -1
	[0118.119] lstrcmpW (lpString1=".", lpString2="FmHlph98Kx4634Gw6S") returned -1
	[0118.119] StrStrW (lpFirst="fmhlph98kx4634gw6s", lpSrch="programdata") returned 0x0
	[0118.119] StrStrW (lpFirst="fmhlph98kx4634gw6s", lpSrch="$recycle.bin") returned 0x0
	[0118.119] StrStrW (lpFirst="fmhlph98kx4634gw6s", lpSrch="program files") returned 0x0
	[0118.119] StrStrW (lpFirst="fmhlph98kx4634gw6s", lpSrch="windows") returned 0x0
	[0118.119] StrStrW (lpFirst="fmhlph98kx4634gw6s", lpSrch="all users") returned 0x0
	[0118.120] StrStrW (lpFirst="fmhlph98kx4634gw6s", lpSrch="winnt") returned 0x0
	[0118.120] StrStrW (lpFirst="fmhlph98kx4634gw6s", lpSrch="appdata") returned 0x0
	[0118.120] StrStrW (lpFirst="fmhlph98kx4634gw6s", lpSrch="application data") returned 0x0
	[0118.120] StrStrW (lpFirst="fmhlph98kx4634gw6s", lpSrch="local settings") returned 0x0
	[0118.120] StrStrW (lpFirst="fmhlph98kx4634gw6s", lpSrch="boot") returned 0x0
	[0118.120] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0118.120] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0118.120] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\*", lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77441cc0, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x71c226f0, ftLastAccessTime.dwHighDateTime=0x1d5e64c, ftLastWriteTime.dwLowDateTime=0x71c226f0, ftLastWriteTime.dwHighDateTime=0x1d5e64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea50
	[0118.120] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0118.120] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0118.120] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0118.120] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0118.120] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0118.120] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77441cc0, ftCreationTime.dwHighDateTime=0x1d5e465, ftLastAccessTime.dwLowDateTime=0x71c226f0, ftLastAccessTime.dwHighDateTime=0x1d5e64c, ftLastWriteTime.dwLowDateTime=0x71c226f0, ftLastWriteTime.dwHighDateTime=0x1d5e64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0118.120] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0118.121] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0118.121] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0118.121] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0118.121] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0118.121] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda214ca0, ftCreationTime.dwHighDateTime=0x1d5e5be, ftLastAccessTime.dwLowDateTime=0x5d2bfb40, ftLastAccessTime.dwHighDateTime=0x1d5d967, ftLastWriteTime.dwLowDateTime=0x5d2bfb40, ftLastWriteTime.dwHighDateTime=0x1d5d967, nFileSizeHigh=0x0, nFileSizeLow=0x66b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="dBsAbLJJTrj1-xc3avY.wav", cAlternateFileName="DBSABL~1.WAV")) returned 1
	[0118.121] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0118.121] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0118.121] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0118.121] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.121] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="ntldr") returned 0x0
	[0118.121] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="pagefile.sys") returned 0x0
	[0118.121] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="ntdetect.com") returned 0x0
	[0118.121] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="autoexec.bat") returned 0x0
	[0118.121] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="desktop.ini") returned 0x0
	[0118.121] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="autorun.inf") returned 0x0
	[0118.121] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="ntuser.dat") returned 0x0
	[0118.121] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="iconcache.db") returned 0x0
	[0118.121] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="bootsect.bak") returned 0x0
	[0118.121] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="boot.ini") returned 0x0
	[0118.121] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="bootfont.bin") returned 0x0
	[0118.122] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="config.sys") returned 0x0
	[0118.122] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="io.sys") returned 0x0
	[0118.122] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="msdos.sys") returned 0x0
	[0118.122] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0118.122] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="thumbs.db") returned 0x0
	[0118.122] StrStrW (lpFirst="dbsabljjtrj1-xc3avy.wav", lpSrch="swapfile.sys") returned 0x0
	[0118.122] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\dBsAbLJJTrj1-xc3avY.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\dbsabljjtrj1-xc3avy.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0118.122] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=26297) returned 1
	[0118.122] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.122] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0118.135] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0118.135] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0118.135] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0118.136] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0118.136] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.136] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0118.147] GetLastError () returned 0x3e5
	[0118.147] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0118.147] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5339df50, ftCreationTime.dwHighDateTime=0x1d5e43c, ftLastAccessTime.dwLowDateTime=0x7facb960, ftLastAccessTime.dwHighDateTime=0x1d5e21e, ftLastWriteTime.dwLowDateTime=0x7facb960, ftLastWriteTime.dwHighDateTime=0x1d5e21e, nFileSizeHigh=0x0, nFileSizeLow=0x2ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gh5EemG6C1-kbGu.mp3", cAlternateFileName="GH5EEM~1.MP3")) returned 1
	[0118.147] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0118.147] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0118.147] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0118.147] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.147] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="ntldr") returned 0x0
	[0118.147] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="pagefile.sys") returned 0x0
	[0118.147] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="ntdetect.com") returned 0x0
	[0118.147] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="autoexec.bat") returned 0x0
	[0118.147] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="desktop.ini") returned 0x0
	[0118.147] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="autorun.inf") returned 0x0
	[0118.147] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="ntuser.dat") returned 0x0
	[0118.147] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="iconcache.db") returned 0x0
	[0118.147] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="bootsect.bak") returned 0x0
	[0118.147] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="boot.ini") returned 0x0
	[0118.148] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="bootfont.bin") returned 0x0
	[0118.148] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="config.sys") returned 0x0
	[0118.148] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="io.sys") returned 0x0
	[0118.148] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="msdos.sys") returned 0x0
	[0118.148] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0118.148] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="thumbs.db") returned 0x0
	[0118.148] StrStrW (lpFirst="gh5eemg6c1-kbgu.mp3", lpSrch="swapfile.sys") returned 0x0
	[0118.148] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\Gh5EemG6C1-kbGu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\gh5eemg6c1-kbgu.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0118.148] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=10936) returned 1
	[0118.148] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.148] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0118.160] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.160] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0118.160] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0118.161] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0118.161] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.162] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0118.170] GetLastError () returned 0x3e5
	[0118.170] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0118.170] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc379c780, ftCreationTime.dwHighDateTime=0x1d5d965, ftLastAccessTime.dwLowDateTime=0x88b93780, ftLastAccessTime.dwHighDateTime=0x1d5e021, ftLastWriteTime.dwLowDateTime=0x88b93780, ftLastWriteTime.dwHighDateTime=0x1d5e021, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hp6hL8K", cAlternateFileName="")) returned 1
	[0118.171] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0118.171] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0118.171] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0118.171] lstrcmpW (lpString1="..", lpString2="hp6hL8K") returned -1
	[0118.171] lstrcmpW (lpString1=".", lpString2="hp6hL8K") returned -1
	[0118.171] StrStrW (lpFirst="hp6hl8k", lpSrch="programdata") returned 0x0
	[0118.171] StrStrW (lpFirst="hp6hl8k", lpSrch="$recycle.bin") returned 0x0
	[0118.171] StrStrW (lpFirst="hp6hl8k", lpSrch="program files") returned 0x0
	[0118.171] StrStrW (lpFirst="hp6hl8k", lpSrch="windows") returned 0x0
	[0118.171] StrStrW (lpFirst="hp6hl8k", lpSrch="all users") returned 0x0
	[0118.171] StrStrW (lpFirst="hp6hl8k", lpSrch="winnt") returned 0x0
	[0118.171] StrStrW (lpFirst="hp6hl8k", lpSrch="appdata") returned 0x0
	[0118.171] StrStrW (lpFirst="hp6hl8k", lpSrch="application data") returned 0x0
	[0118.171] StrStrW (lpFirst="hp6hl8k", lpSrch="local settings") returned 0x0
	[0118.171] StrStrW (lpFirst="hp6hl8k", lpSrch="boot") returned 0x0
	[0118.171] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0118.171] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0118.171] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\*", lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc379c780, ftCreationTime.dwHighDateTime=0x1d5d965, ftLastAccessTime.dwLowDateTime=0x88b93780, ftLastAccessTime.dwHighDateTime=0x1d5e021, ftLastWriteTime.dwLowDateTime=0x88b93780, ftLastWriteTime.dwHighDateTime=0x1d5e021, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61eb90
	[0118.172] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0118.172] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0118.172] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0118.172] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0118.172] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0118.172] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc379c780, ftCreationTime.dwHighDateTime=0x1d5d965, ftLastAccessTime.dwLowDateTime=0x88b93780, ftLastAccessTime.dwHighDateTime=0x1d5e021, ftLastWriteTime.dwLowDateTime=0x88b93780, ftLastWriteTime.dwHighDateTime=0x1d5e021, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0118.172] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0118.172] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0118.172] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0118.172] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0118.172] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0118.172] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f819540, ftCreationTime.dwHighDateTime=0x1d5e1aa, ftLastAccessTime.dwLowDateTime=0x4dd491d0, ftLastAccessTime.dwHighDateTime=0x1d5d844, ftLastWriteTime.dwLowDateTime=0x4dd491d0, ftLastWriteTime.dwHighDateTime=0x1d5d844, nFileSizeHigh=0x0, nFileSizeLow=0x84a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="B_Fk.mp3", cAlternateFileName="")) returned 1
	[0118.172] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0118.172] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0118.172] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0118.172] StrStrW (lpFirst="b_fk.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.172] StrStrW (lpFirst="b_fk.mp3", lpSrch="ntldr") returned 0x0
	[0118.172] StrStrW (lpFirst="b_fk.mp3", lpSrch="pagefile.sys") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="ntdetect.com") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="autoexec.bat") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="desktop.ini") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="autorun.inf") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="ntuser.dat") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="iconcache.db") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="bootsect.bak") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="boot.ini") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="bootfont.bin") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="config.sys") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="io.sys") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="msdos.sys") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="thumbs.db") returned 0x0
	[0118.173] StrStrW (lpFirst="b_fk.mp3", lpSrch="swapfile.sys") returned 0x0
	[0118.173] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\B_Fk.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\b_fk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e4
	[0118.174] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=33959) returned 1
	[0118.174] CreateIoCompletionPort (FileHandle=0x3e4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.174] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0118.186] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0118.186] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0118.186] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0118.187] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0118.187] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.187] ReadFile (in: hFile=0x3e4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0118.195] GetLastError () returned 0x3e5
	[0118.195] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0118.195] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9173b30, ftCreationTime.dwHighDateTime=0x1d5d90a, ftLastAccessTime.dwLowDateTime=0x92f701b0, ftLastAccessTime.dwHighDateTime=0x1d5dc0b, ftLastWriteTime.dwLowDateTime=0x92f701b0, ftLastWriteTime.dwHighDateTime=0x1d5dc0b, nFileSizeHigh=0x0, nFileSizeLow=0xa72b, dwReserved0=0x0, dwReserved1=0x0, cFileName="iEyXzDZJ8s LPAJN.mp3", cAlternateFileName="IEYXZD~1.MP3")) returned 1
	[0118.195] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0118.195] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0118.196] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="ntldr") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="pagefile.sys") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="ntdetect.com") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="autoexec.bat") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="desktop.ini") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="autorun.inf") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="ntuser.dat") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="iconcache.db") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="bootsect.bak") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="boot.ini") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="bootfont.bin") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="config.sys") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="io.sys") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="msdos.sys") returned 0x0
	[0118.196] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0118.197] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="thumbs.db") returned 0x0
	[0118.197] StrStrW (lpFirst="ieyxzdzj8s lpajn.mp3", lpSrch="swapfile.sys") returned 0x0
	[0118.197] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\iEyXzDZJ8s LPAJN.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\ieyxzdzj8s lpajn.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e4
	[0118.197] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=42795) returned 1
	[0118.197] CreateIoCompletionPort (FileHandle=0x3e4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.197] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0118.354] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0118.354] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0118.354] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0118.355] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0118.355] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.355] ReadFile (in: hFile=0x3e4, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0118.381] GetLastError () returned 0x3e5
	[0118.381] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0118.381] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0426ee0, ftCreationTime.dwHighDateTime=0x1d5e763, ftLastAccessTime.dwLowDateTime=0xd1443230, ftLastAccessTime.dwHighDateTime=0x1d5de13, ftLastWriteTime.dwLowDateTime=0xd1443230, ftLastWriteTime.dwHighDateTime=0x1d5de13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRKdRF8m9ZMW", cAlternateFileName="SRKDRF~1")) returned 1
	[0118.381] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0118.382] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0118.382] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0118.382] lstrcmpW (lpString1="..", lpString2="sRKdRF8m9ZMW") returned -1
	[0118.382] lstrcmpW (lpString1=".", lpString2="sRKdRF8m9ZMW") returned -1
	[0118.382] StrStrW (lpFirst="srkdrf8m9zmw", lpSrch="programdata") returned 0x0
	[0118.382] StrStrW (lpFirst="srkdrf8m9zmw", lpSrch="$recycle.bin") returned 0x0
	[0118.382] StrStrW (lpFirst="srkdrf8m9zmw", lpSrch="program files") returned 0x0
	[0118.382] StrStrW (lpFirst="srkdrf8m9zmw", lpSrch="windows") returned 0x0
	[0118.382] StrStrW (lpFirst="srkdrf8m9zmw", lpSrch="all users") returned 0x0
	[0118.382] StrStrW (lpFirst="srkdrf8m9zmw", lpSrch="winnt") returned 0x0
	[0118.382] StrStrW (lpFirst="srkdrf8m9zmw", lpSrch="appdata") returned 0x0
	[0118.382] StrStrW (lpFirst="srkdrf8m9zmw", lpSrch="application data") returned 0x0
	[0118.382] StrStrW (lpFirst="srkdrf8m9zmw", lpSrch="local settings") returned 0x0
	[0118.382] StrStrW (lpFirst="srkdrf8m9zmw", lpSrch="boot") returned 0x0
	[0118.382] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0118.382] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.382] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\*", lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0426ee0, ftCreationTime.dwHighDateTime=0x1d5e763, ftLastAccessTime.dwLowDateTime=0xd1443230, ftLastAccessTime.dwHighDateTime=0x1d5de13, ftLastWriteTime.dwLowDateTime=0xd1443230, ftLastWriteTime.dwHighDateTime=0x1d5de13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ebd0
	[0118.383] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.383] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.383] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0118.383] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0118.383] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.383] FindNextFileW (in: hFindFile=0x61ebd0, lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0426ee0, ftCreationTime.dwHighDateTime=0x1d5e763, ftLastAccessTime.dwLowDateTime=0xd1443230, ftLastAccessTime.dwHighDateTime=0x1d5de13, ftLastWriteTime.dwLowDateTime=0xd1443230, ftLastWriteTime.dwHighDateTime=0x1d5de13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0118.383] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.383] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0118.383] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.383] FindNextFileW (in: hFindFile=0x61ebd0, lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7425d4b0, ftCreationTime.dwHighDateTime=0x1d5e6f5, ftLastAccessTime.dwLowDateTime=0x360dc300, ftLastAccessTime.dwHighDateTime=0x1d5d7bd, ftLastWriteTime.dwLowDateTime=0x360dc300, ftLastWriteTime.dwHighDateTime=0x1d5d7bd, nFileSizeHigh=0x0, nFileSizeLow=0x109bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="2VL5_3iPUx8mw.wav", cAlternateFileName="2VL5_3~1.WAV")) returned 1
	[0118.383] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.383] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x351fec8
	[0118.383] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.383] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.383] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="ntldr") returned 0x0
	[0118.383] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="pagefile.sys") returned 0x0
	[0118.383] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="ntdetect.com") returned 0x0
	[0118.383] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="autoexec.bat") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="desktop.ini") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="autorun.inf") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="ntuser.dat") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="iconcache.db") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="bootsect.bak") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="boot.ini") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="bootfont.bin") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="config.sys") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="io.sys") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="msdos.sys") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="thumbs.db") returned 0x0
	[0118.384] StrStrW (lpFirst="2vl5_3ipux8mw.wav", lpSrch="swapfile.sys") returned 0x0
	[0118.384] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\2VL5_3iPUx8mw.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\2vl5_3ipux8mw.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3f4
	[0118.385] GetFileSizeEx (in: hFile=0x3f4, lpFileSize=0x3f6dac8 | out: lpFileSize=0x3f6dac8*=68031) returned 1
	[0118.385] CreateIoCompletionPort (FileHandle=0x3f4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.385] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0118.397] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043068
	[0118.397] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x4047060
	[0118.397] CryptAcquireContextW (in: phProv=0x3f6d79c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6d79c*=0x633110) returned 1
	[0118.398] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6d7b0 | out: pbBuffer=0x3f6d7b0) returned 1
	[0118.398] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.398] ReadFile (in: hFile=0x3f4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0118.399] GetLastError () returned 0x3e5
	[0118.399] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0118.399] FindNextFileW (in: hFindFile=0x61ebd0, lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7363e30, ftCreationTime.dwHighDateTime=0x1d5dbfa, ftLastAccessTime.dwLowDateTime=0x846abe60, ftLastAccessTime.dwHighDateTime=0x1d5d8a1, ftLastWriteTime.dwLowDateTime=0x846abe60, ftLastWriteTime.dwHighDateTime=0x1d5d8a1, nFileSizeHigh=0x0, nFileSizeLow=0x13d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="itp9emm8tymg346g.mp3", cAlternateFileName="ITP9EM~1.MP3")) returned 1
	[0118.399] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.399] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x351fec8
	[0118.399] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.399] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.399] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="ntldr") returned 0x0
	[0118.399] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="pagefile.sys") returned 0x0
	[0118.399] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="ntdetect.com") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="autoexec.bat") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="desktop.ini") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="autorun.inf") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="ntuser.dat") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="iconcache.db") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="bootsect.bak") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="boot.ini") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="bootfont.bin") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="config.sys") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="io.sys") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="msdos.sys") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="thumbs.db") returned 0x0
	[0118.400] StrStrW (lpFirst="itp9emm8tymg346g.mp3", lpSrch="swapfile.sys") returned 0x0
	[0118.400] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\itp9emm8tymg346g.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\itp9emm8tymg346g.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0118.401] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6dac8 | out: lpFileSize=0x3f6dac8*=81193) returned 1
	[0118.401] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.401] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0118.415] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043150
	[0118.415] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x4047570
	[0118.415] CryptAcquireContextW (in: phProv=0x3f6d79c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6d79c*=0x633110) returned 1
	[0118.416] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6d7b0 | out: pbBuffer=0x3f6d7b0) returned 1
	[0118.416] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.416] ReadFile (in: hFile=0x3dc, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0118.417] GetLastError () returned 0x3e5
	[0118.417] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0118.417] FindNextFileW (in: hFindFile=0x61ebd0, lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0ff0ac0, ftCreationTime.dwHighDateTime=0x1d5e041, ftLastAccessTime.dwLowDateTime=0xc339eb00, ftLastAccessTime.dwHighDateTime=0x1d5dc68, ftLastWriteTime.dwLowDateTime=0xc339eb00, ftLastWriteTime.dwHighDateTime=0x1d5dc68, nFileSizeHigh=0x0, nFileSizeLow=0xca41, dwReserved0=0x0, dwReserved1=0x0, cFileName="w eWm28.wav", cAlternateFileName="WEWM28~1.WAV")) returned 1
	[0118.417] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.417] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x351fec8
	[0118.417] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="ntldr") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="pagefile.sys") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="ntdetect.com") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="autoexec.bat") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="desktop.ini") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="autorun.inf") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="ntuser.dat") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="iconcache.db") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="bootsect.bak") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="boot.ini") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="bootfont.bin") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="config.sys") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="io.sys") returned 0x0
	[0118.418] StrStrW (lpFirst="w ewm28.wav", lpSrch="msdos.sys") returned 0x0
	[0118.419] StrStrW (lpFirst="w ewm28.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0118.419] StrStrW (lpFirst="w ewm28.wav", lpSrch="thumbs.db") returned 0x0
	[0118.419] StrStrW (lpFirst="w ewm28.wav", lpSrch="swapfile.sys") returned 0x0
	[0118.419] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\w eWm28.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\w ewm28.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3f8
	[0118.419] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x3f6dac8 | out: lpFileSize=0x3f6dac8*=51777) returned 1
	[0118.419] CreateIoCompletionPort (FileHandle=0x3f8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.419] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4ab0020
	[0118.433] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618dd8
	[0118.433] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x4047a80
	[0118.433] CryptAcquireContextW (in: phProv=0x3f6d79c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6d79c*=0x633110) returned 1
	[0118.434] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6d7b0 | out: pbBuffer=0x3f6d7b0) returned 1
	[0118.434] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.434] ReadFile (in: hFile=0x3f8, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0118.435] GetLastError () returned 0x3e5
	[0118.435] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0118.435] FindNextFileW (in: hFindFile=0x61ebd0, lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7269fb30, ftCreationTime.dwHighDateTime=0x1d5db81, ftLastAccessTime.dwLowDateTime=0x7e7484b0, ftLastAccessTime.dwHighDateTime=0x1d5e746, ftLastWriteTime.dwLowDateTime=0x7e7484b0, ftLastWriteTime.dwHighDateTime=0x1d5e746, nFileSizeHigh=0x0, nFileSizeLow=0x15def, dwReserved0=0x0, dwReserved1=0x0, cFileName="y-rp-EXZ-yK.mp3", cAlternateFileName="Y-RP-E~1.MP3")) returned 1
	[0118.435] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.435] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x351fec8
	[0118.435] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="ntldr") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="pagefile.sys") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="ntdetect.com") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="autoexec.bat") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="desktop.ini") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="autorun.inf") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="ntuser.dat") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="iconcache.db") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="bootsect.bak") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="boot.ini") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="bootfont.bin") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="config.sys") returned 0x0
	[0118.436] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="io.sys") returned 0x0
	[0118.437] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="msdos.sys") returned 0x0
	[0118.437] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0118.437] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="thumbs.db") returned 0x0
	[0118.437] StrStrW (lpFirst="y-rp-exz-yk.mp3", lpSrch="swapfile.sys") returned 0x0
	[0118.437] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\y-rp-EXZ-yK.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\y-rp-exz-yk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x378
	[0118.437] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x3f6dac8 | out: lpFileSize=0x3f6dac8*=89583) returned 1
	[0118.437] CreateIoCompletionPort (FileHandle=0x378, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.437] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4bb0020
	[0118.452] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043238
	[0118.452] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0118.452] CryptAcquireContextW (in: phProv=0x3f6d79c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6d79c*=0x633110) returned 1
	[0118.453] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6d7b0 | out: pbBuffer=0x3f6d7b0) returned 1
	[0118.453] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.453] ReadFile (in: hFile=0x378, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 1
	[0118.454] GetLastError () returned 0x3e5
	[0118.454] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0118.454] FindNextFileW (in: hFindFile=0x61ebd0, lpFindFileData=0x3f6dba0 | out: lpFindFileData=0x3f6dba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7269fb30, ftCreationTime.dwHighDateTime=0x1d5db81, ftLastAccessTime.dwLowDateTime=0x7e7484b0, ftLastAccessTime.dwHighDateTime=0x1d5e746, ftLastWriteTime.dwLowDateTime=0x7e7484b0, ftLastWriteTime.dwHighDateTime=0x1d5e746, nFileSizeHigh=0x0, nFileSizeLow=0x15def, dwReserved0=0x0, dwReserved1=0x0, cFileName="y-rp-exz-yk.mp3", cAlternateFileName="Y-RP-E~1.MP3")) returned 0
	[0118.454] FindClose (in: hFindFile=0x61ebd0 | out: hFindFile=0x61ebd0) returned 1
	[0118.455] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0118.455] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.455] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x351fec8
	[0118.455] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.455] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\sRKdRF8m9ZMW\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\srkdrf8m9zmw\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3c4
	[0118.456] WriteFile (in: hFile=0x3c4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6db84, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6db84*=0x512, lpOverlapped=0x0) returned 1
	[0118.457] CloseHandle (hObject=0x3c4) returned 1
	[0118.457] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0118.457] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0118.457] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0118.457] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0118.457] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bbbfd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0x7f0101b0, ftLastAccessTime.dwHighDateTime=0x1d5db1b, ftLastWriteTime.dwLowDateTime=0x7f0101b0, ftLastWriteTime.dwHighDateTime=0x1d5db1b, nFileSizeHigh=0x0, nFileSizeLow=0xdcc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z91x8WDi69_xh58s6v_4.mp3", cAlternateFileName="Z91X8W~1.MP3")) returned 1
	[0118.457] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0118.457] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0118.458] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0118.458] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.458] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="ntldr") returned 0x0
	[0118.458] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="pagefile.sys") returned 0x0
	[0118.458] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="ntdetect.com") returned 0x0
	[0118.458] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="autoexec.bat") returned 0x0
	[0118.458] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="desktop.ini") returned 0x0
	[0118.458] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="autorun.inf") returned 0x0
	[0118.458] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="ntuser.dat") returned 0x0
	[0118.458] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="iconcache.db") returned 0x0
	[0118.458] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="bootsect.bak") returned 0x0
	[0118.458] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="boot.ini") returned 0x0
	[0118.458] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="bootfont.bin") returned 0x0
	[0118.459] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="config.sys") returned 0x0
	[0118.459] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="io.sys") returned 0x0
	[0118.459] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="msdos.sys") returned 0x0
	[0118.459] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0118.459] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="thumbs.db") returned 0x0
	[0118.459] StrStrW (lpFirst="z91x8wdi69_xh58s6v_4.mp3", lpSrch="swapfile.sys") returned 0x0
	[0118.459] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\Z91x8WDi69_xh58s6v_4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\z91x8wdi69_xh58s6v_4.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0118.459] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=56520) returned 1
	[0118.459] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.459] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4cb0020
	[0118.475] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0118.475] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0118.475] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0118.476] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0118.476] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.476] ReadFile (in: hFile=0x3c4, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0118.477] GetLastError () returned 0x3e5
	[0118.477] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0118.477] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bbbfd0, ftCreationTime.dwHighDateTime=0x1d5da37, ftLastAccessTime.dwLowDateTime=0x7f0101b0, ftLastAccessTime.dwHighDateTime=0x1d5db1b, ftLastWriteTime.dwLowDateTime=0x7f0101b0, ftLastWriteTime.dwHighDateTime=0x1d5db1b, nFileSizeHigh=0x0, nFileSizeLow=0xdcc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="z91x8wdi69_xh58s6v_4.mp3", cAlternateFileName="Z91X8W~1.MP3")) returned 0
	[0118.477] FindClose (in: hFindFile=0x61eb90 | out: hFindFile=0x61eb90) returned 1
	[0118.477] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0118.477] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0118.477] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0118.477] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0118.478] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\hp6hL8K\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\hp6hl8k\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x38c
	[0118.478] WriteFile (in: hFile=0x38c, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6deb4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6deb4*=0x512, lpOverlapped=0x0) returned 1
	[0118.479] CloseHandle (hObject=0x38c) returned 1
	[0118.480] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0118.480] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0118.480] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0118.480] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0118.480] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cadeef0, ftCreationTime.dwHighDateTime=0x1d5e014, ftLastAccessTime.dwLowDateTime=0x66696840, ftLastAccessTime.dwHighDateTime=0x1d5df1c, ftLastWriteTime.dwLowDateTime=0x66696840, ftLastWriteTime.dwHighDateTime=0x1d5df1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jk72PoPSae6I8JJAUZj", cAlternateFileName="JK72PO~1")) returned 1
	[0118.480] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0118.480] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0118.480] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0118.480] lstrcmpW (lpString1="..", lpString2="jk72PoPSae6I8JJAUZj") returned -1
	[0118.480] lstrcmpW (lpString1=".", lpString2="jk72PoPSae6I8JJAUZj") returned -1
	[0118.480] StrStrW (lpFirst="jk72popsae6i8jjauzj", lpSrch="programdata") returned 0x0
	[0118.480] StrStrW (lpFirst="jk72popsae6i8jjauzj", lpSrch="$recycle.bin") returned 0x0
	[0118.480] StrStrW (lpFirst="jk72popsae6i8jjauzj", lpSrch="program files") returned 0x0
	[0118.481] StrStrW (lpFirst="jk72popsae6i8jjauzj", lpSrch="windows") returned 0x0
	[0118.481] StrStrW (lpFirst="jk72popsae6i8jjauzj", lpSrch="all users") returned 0x0
	[0118.481] StrStrW (lpFirst="jk72popsae6i8jjauzj", lpSrch="winnt") returned 0x0
	[0118.481] StrStrW (lpFirst="jk72popsae6i8jjauzj", lpSrch="appdata") returned 0x0
	[0118.481] StrStrW (lpFirst="jk72popsae6i8jjauzj", lpSrch="application data") returned 0x0
	[0118.481] StrStrW (lpFirst="jk72popsae6i8jjauzj", lpSrch="local settings") returned 0x0
	[0118.481] StrStrW (lpFirst="jk72popsae6i8jjauzj", lpSrch="boot") returned 0x0
	[0118.481] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0118.481] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.481] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\*", lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cadeef0, ftCreationTime.dwHighDateTime=0x1d5e014, ftLastAccessTime.dwLowDateTime=0x66696840, ftLastAccessTime.dwHighDateTime=0x1d5df1c, ftLastWriteTime.dwLowDateTime=0x66696840, ftLastWriteTime.dwHighDateTime=0x1d5df1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61eb90
	[0118.481] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.481] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.482] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0118.482] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0118.482] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.482] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cadeef0, ftCreationTime.dwHighDateTime=0x1d5e014, ftLastAccessTime.dwLowDateTime=0x66696840, ftLastAccessTime.dwHighDateTime=0x1d5df1c, ftLastWriteTime.dwLowDateTime=0x66696840, ftLastWriteTime.dwHighDateTime=0x1d5df1c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0118.482] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.482] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0118.482] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.482] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6d919a0, ftCreationTime.dwHighDateTime=0x1d5e27b, ftLastAccessTime.dwLowDateTime=0x871376c0, ftLastAccessTime.dwHighDateTime=0x1d5e021, ftLastWriteTime.dwLowDateTime=0x871376c0, ftLastWriteTime.dwHighDateTime=0x1d5e021, nFileSizeHigh=0x0, nFileSizeLow=0x12247, dwReserved0=0x0, dwReserved1=0x0, cFileName="P3Sb-u-d6.wav", cAlternateFileName="P3SB-U~1.WAV")) returned 1
	[0118.482] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.482] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x35166c0
	[0118.482] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.482] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.482] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="ntldr") returned 0x0
	[0118.482] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="pagefile.sys") returned 0x0
	[0118.482] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="ntdetect.com") returned 0x0
	[0118.483] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="autoexec.bat") returned 0x0
	[0118.483] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="desktop.ini") returned 0x0
	[0118.483] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="autorun.inf") returned 0x0
	[0118.483] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="ntuser.dat") returned 0x0
	[0118.483] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="iconcache.db") returned 0x0
	[0118.483] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="bootsect.bak") returned 0x0
	[0118.483] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="boot.ini") returned 0x0
	[0118.483] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="bootfont.bin") returned 0x0
	[0118.483] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="config.sys") returned 0x0
	[0118.483] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="io.sys") returned 0x0
	[0118.483] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="msdos.sys") returned 0x0
	[0118.483] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0118.484] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="thumbs.db") returned 0x0
	[0118.484] StrStrW (lpFirst="p3sb-u-d6.wav", lpSrch="swapfile.sys") returned 0x0
	[0118.484] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\P3Sb-u-d6.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\p3sb-u-d6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x37c
	[0118.484] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=74311) returned 1
	[0118.484] CreateIoCompletionPort (FileHandle=0x37c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.484] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4db0020
	[0118.718] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0118.718] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0118.718] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0118.720] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0118.720] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.720] ReadFile (in: hFile=0x37c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0
	[0118.733] GetLastError () returned 0x3e5
	[0118.733] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0118.733] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda98980, ftCreationTime.dwHighDateTime=0x1d5dfec, ftLastAccessTime.dwLowDateTime=0x765e01f0, ftLastAccessTime.dwHighDateTime=0x1d5dca3, ftLastWriteTime.dwLowDateTime=0x765e01f0, ftLastWriteTime.dwHighDateTime=0x1d5dca3, nFileSizeHigh=0x0, nFileSizeLow=0xc1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="rnMfNsBIAlEfp.wav", cAlternateFileName="RNMFNS~1.WAV")) returned 1
	[0118.733] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.733] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x35166c0
	[0118.733] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.733] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.733] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="ntldr") returned 0x0
	[0118.733] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="pagefile.sys") returned 0x0
	[0118.733] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="ntdetect.com") returned 0x0
	[0118.733] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="autoexec.bat") returned 0x0
	[0118.733] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="desktop.ini") returned 0x0
	[0118.733] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="autorun.inf") returned 0x0
	[0118.733] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="ntuser.dat") returned 0x0
	[0118.734] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="iconcache.db") returned 0x0
	[0118.734] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="bootsect.bak") returned 0x0
	[0118.734] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="boot.ini") returned 0x0
	[0118.734] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="bootfont.bin") returned 0x0
	[0118.734] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="config.sys") returned 0x0
	[0118.734] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="io.sys") returned 0x0
	[0118.734] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="msdos.sys") returned 0x0
	[0118.734] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0118.734] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="thumbs.db") returned 0x0
	[0118.734] StrStrW (lpFirst="rnmfnsbialefp.wav", lpSrch="swapfile.sys") returned 0x0
	[0118.734] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\rnMfNsBIAlEfp.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\rnmfnsbialefp.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x37c
	[0118.735] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=49635) returned 1
	[0118.735] CreateIoCompletionPort (FileHandle=0x37c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.735] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0118.750] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043320
	[0118.750] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0118.750] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0118.752] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0118.752] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.752] ReadFile (in: hFile=0x37c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0118.753] GetLastError () returned 0x3e5
	[0118.753] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0118.753] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3b8b70, ftCreationTime.dwHighDateTime=0x1d5d9e3, ftLastAccessTime.dwLowDateTime=0xdb3d3ba0, ftLastAccessTime.dwHighDateTime=0x1d5db44, ftLastWriteTime.dwLowDateTime=0xdb3d3ba0, ftLastWriteTime.dwHighDateTime=0x1d5db44, nFileSizeHigh=0x0, nFileSizeLow=0x17abb, dwReserved0=0x0, dwReserved1=0x0, cFileName="V5I3fCDGltu02BTLrQ.wav", cAlternateFileName="V5I3FC~1.WAV")) returned 1
	[0118.753] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.753] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x35166c0
	[0118.754] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.754] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.754] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="ntldr") returned 0x0
	[0118.754] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="pagefile.sys") returned 0x0
	[0118.754] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="ntdetect.com") returned 0x0
	[0118.754] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="autoexec.bat") returned 0x0
	[0118.754] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="desktop.ini") returned 0x0
	[0118.754] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="autorun.inf") returned 0x0
	[0118.755] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="ntuser.dat") returned 0x0
	[0118.755] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="iconcache.db") returned 0x0
	[0118.755] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="bootsect.bak") returned 0x0
	[0118.755] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="boot.ini") returned 0x0
	[0118.755] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="bootfont.bin") returned 0x0
	[0118.755] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="config.sys") returned 0x0
	[0118.755] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="io.sys") returned 0x0
	[0118.755] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="msdos.sys") returned 0x0
	[0118.755] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0118.755] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="thumbs.db") returned 0x0
	[0118.756] StrStrW (lpFirst="v5i3fcdgltu02btlrq.wav", lpSrch="swapfile.sys") returned 0x0
	[0118.756] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\V5I3fCDGltu02BTLrQ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\v5i3fcdgltu02btlrq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0118.756] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=96955) returned 1
	[0118.756] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.756] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0118.773] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0118.773] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0118.773] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0118.774] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0118.774] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.774] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0118.788] GetLastError () returned 0x3e5
	[0118.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0118.788] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d8fe20, ftCreationTime.dwHighDateTime=0x1d5e7a4, ftLastAccessTime.dwLowDateTime=0x3888a1e0, ftLastAccessTime.dwHighDateTime=0x1d5e6c2, ftLastWriteTime.dwLowDateTime=0x3888a1e0, ftLastWriteTime.dwHighDateTime=0x1d5e6c2, nFileSizeHigh=0x0, nFileSizeLow=0x12b39, dwReserved0=0x0, dwReserved1=0x0, cFileName="w1DbSomcsNE.mp3", cAlternateFileName="W1DBSO~1.MP3")) returned 1
	[0118.788] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.788] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x35166c0
	[0118.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.788] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.788] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="ntldr") returned 0x0
	[0118.788] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="pagefile.sys") returned 0x0
	[0118.788] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="ntdetect.com") returned 0x0
	[0118.788] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="autoexec.bat") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="desktop.ini") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="autorun.inf") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="ntuser.dat") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="iconcache.db") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="bootsect.bak") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="boot.ini") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="bootfont.bin") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="config.sys") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="io.sys") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="msdos.sys") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="thumbs.db") returned 0x0
	[0118.789] StrStrW (lpFirst="w1dbsomcsne.mp3", lpSrch="swapfile.sys") returned 0x0
	[0118.790] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\w1DbSomcsNE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\w1dbsomcsne.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0118.790] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=76601) returned 1
	[0118.790] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.790] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0118.807] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043150
	[0118.807] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0118.807] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0118.808] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0118.808] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.808] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0118.825] GetLastError () returned 0x3e5
	[0118.825] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0118.825] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701e7440, ftCreationTime.dwHighDateTime=0x1d5e005, ftLastAccessTime.dwLowDateTime=0x3c5e53f0, ftLastAccessTime.dwHighDateTime=0x1d5dbeb, ftLastWriteTime.dwLowDateTime=0x3c5e53f0, ftLastWriteTime.dwHighDateTime=0x1d5dbeb, nFileSizeHigh=0x0, nFileSizeLow=0x164b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="XVeqQpg-1F.wav", cAlternateFileName="XVEQQP~1.WAV")) returned 1
	[0118.825] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0118.825] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x35166c0
	[0118.825] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0118.825] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0118.825] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="ntldr") returned 0x0
	[0118.825] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="pagefile.sys") returned 0x0
	[0118.825] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="ntdetect.com") returned 0x0
	[0118.825] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="autoexec.bat") returned 0x0
	[0118.825] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="desktop.ini") returned 0x0
	[0118.825] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="autorun.inf") returned 0x0
	[0118.825] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="ntuser.dat") returned 0x0
	[0118.826] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="iconcache.db") returned 0x0
	[0118.826] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="bootsect.bak") returned 0x0
	[0118.826] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="boot.ini") returned 0x0
	[0118.826] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="bootfont.bin") returned 0x0
	[0118.826] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="config.sys") returned 0x0
	[0118.826] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="io.sys") returned 0x0
	[0118.826] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="msdos.sys") returned 0x0
	[0118.826] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0118.826] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="thumbs.db") returned 0x0
	[0118.826] StrStrW (lpFirst="xveqqpg-1f.wav", lpSrch="swapfile.sys") returned 0x0
	[0118.826] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\XVeqQpg-1F.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\xveqqpg-1f.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0118.827] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=91321) returned 1
	[0118.827] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0118.827] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0118.842] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043238
	[0118.842] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0118.843] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0118.844] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0118.844] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0118.844] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0119.051] GetLastError () returned 0x3e5
	[0119.052] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0119.052] FindNextFileW (in: hFindFile=0x61eb90, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701e7440, ftCreationTime.dwHighDateTime=0x1d5e005, ftLastAccessTime.dwLowDateTime=0x3c5e53f0, ftLastAccessTime.dwHighDateTime=0x1d5dbeb, ftLastWriteTime.dwLowDateTime=0x3c5e53f0, ftLastWriteTime.dwHighDateTime=0x1d5dbeb, nFileSizeHigh=0x0, nFileSizeLow=0x164b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="xveqqpg-1f.wav", cAlternateFileName="XVEQQP~1.WAV")) returned 0
	[0119.052] FindClose (in: hFindFile=0x61eb90 | out: hFindFile=0x61eb90) returned 1
	[0119.052] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0119.052] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0119.052] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x35166c0
	[0119.052] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0119.052] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\jk72PoPSae6I8JJAUZj\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\jk72popsae6i8jjauzj\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x38c
	[0119.053] WriteFile (in: hFile=0x38c, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6deb4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6deb4*=0x512, lpOverlapped=0x0) returned 1
	[0119.054] CloseHandle (hObject=0x38c) returned 1
	[0119.054] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0119.054] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0119.054] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0119.054] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0119.054] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5947d80, ftCreationTime.dwHighDateTime=0x1d5e736, ftLastAccessTime.dwLowDateTime=0x33dde9e0, ftLastAccessTime.dwHighDateTime=0x1d5e693, ftLastWriteTime.dwLowDateTime=0x33dde9e0, ftLastWriteTime.dwHighDateTime=0x1d5e693, nFileSizeHigh=0x0, nFileSizeLow=0x138dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Luk8dAY_.m4a", cAlternateFileName="")) returned 1
	[0119.054] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0119.055] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0119.055] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="ntldr") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="pagefile.sys") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="ntdetect.com") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="autoexec.bat") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="desktop.ini") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="autorun.inf") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="ntuser.dat") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="iconcache.db") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="bootsect.bak") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="boot.ini") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="bootfont.bin") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="config.sys") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="io.sys") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="msdos.sys") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="ntuser.dat.log") returned 0x0
	[0119.055] StrStrW (lpFirst="luk8day_.m4a", lpSrch="thumbs.db") returned 0x0
	[0119.056] StrStrW (lpFirst="luk8day_.m4a", lpSrch="swapfile.sys") returned 0x0
	[0119.056] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\Luk8dAY_.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\luk8day_.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0119.056] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=80093) returned 1
	[0119.056] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.056] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.067] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0119.067] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0119.067] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0119.068] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0119.068] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0119.068] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.078] GetLastError () returned 0x3e5
	[0119.078] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0119.078] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89eb48d0, ftCreationTime.dwHighDateTime=0x1d5e127, ftLastAccessTime.dwLowDateTime=0x308bbfa0, ftLastAccessTime.dwHighDateTime=0x1d5dc35, ftLastWriteTime.dwLowDateTime=0x308bbfa0, ftLastWriteTime.dwHighDateTime=0x1d5dc35, nFileSizeHigh=0x0, nFileSizeLow=0xa3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n1XQST.wav", cAlternateFileName="")) returned 1
	[0119.078] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0119.078] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0119.078] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0119.078] StrStrW (lpFirst="n1xqst.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.078] StrStrW (lpFirst="n1xqst.wav", lpSrch="ntldr") returned 0x0
	[0119.078] StrStrW (lpFirst="n1xqst.wav", lpSrch="pagefile.sys") returned 0x0
	[0119.078] StrStrW (lpFirst="n1xqst.wav", lpSrch="ntdetect.com") returned 0x0
	[0119.078] StrStrW (lpFirst="n1xqst.wav", lpSrch="autoexec.bat") returned 0x0
	[0119.078] StrStrW (lpFirst="n1xqst.wav", lpSrch="desktop.ini") returned 0x0
	[0119.079] StrStrW (lpFirst="n1xqst.wav", lpSrch="autorun.inf") returned 0x0
	[0119.079] StrStrW (lpFirst="n1xqst.wav", lpSrch="ntuser.dat") returned 0x0
	[0119.079] StrStrW (lpFirst="n1xqst.wav", lpSrch="iconcache.db") returned 0x0
	[0119.079] StrStrW (lpFirst="n1xqst.wav", lpSrch="bootsect.bak") returned 0x0
	[0119.079] StrStrW (lpFirst="n1xqst.wav", lpSrch="boot.ini") returned 0x0
	[0119.079] StrStrW (lpFirst="n1xqst.wav", lpSrch="bootfont.bin") returned 0x0
	[0119.079] StrStrW (lpFirst="n1xqst.wav", lpSrch="config.sys") returned 0x0
	[0119.079] StrStrW (lpFirst="n1xqst.wav", lpSrch="io.sys") returned 0x0
	[0119.079] StrStrW (lpFirst="n1xqst.wav", lpSrch="msdos.sys") returned 0x0
	[0119.079] StrStrW (lpFirst="n1xqst.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0119.079] StrStrW (lpFirst="n1xqst.wav", lpSrch="thumbs.db") returned 0x0
	[0119.079] StrStrW (lpFirst="n1xqst.wav", lpSrch="swapfile.sys") returned 0x0
	[0119.079] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\n1XQST.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\n1xqst.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0119.079] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=41968) returned 1
	[0119.079] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.079] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.102] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0119.102] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0119.102] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0119.103] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0119.103] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0119.103] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.110] GetLastError () returned 0x3e5
	[0119.110] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0119.110] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f983230, ftCreationTime.dwHighDateTime=0x1d5e749, ftLastAccessTime.dwLowDateTime=0x7caff980, ftLastAccessTime.dwHighDateTime=0x1d5dd4f, ftLastWriteTime.dwLowDateTime=0x7caff980, ftLastWriteTime.dwHighDateTime=0x1d5dd4f, nFileSizeHigh=0x0, nFileSizeLow=0xa2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="q_ZFszPd-Qz67G.m4a", cAlternateFileName="Q_ZFSZ~1.M4A")) returned 1
	[0119.110] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0119.110] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0119.110] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0119.110] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.110] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="ntldr") returned 0x0
	[0119.110] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="pagefile.sys") returned 0x0
	[0119.110] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="ntdetect.com") returned 0x0
	[0119.110] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="autoexec.bat") returned 0x0
	[0119.110] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="desktop.ini") returned 0x0
	[0119.110] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="autorun.inf") returned 0x0
	[0119.111] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="ntuser.dat") returned 0x0
	[0119.111] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="iconcache.db") returned 0x0
	[0119.111] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="bootsect.bak") returned 0x0
	[0119.111] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="boot.ini") returned 0x0
	[0119.111] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="bootfont.bin") returned 0x0
	[0119.111] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="config.sys") returned 0x0
	[0119.111] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="io.sys") returned 0x0
	[0119.111] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="msdos.sys") returned 0x0
	[0119.111] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="ntuser.dat.log") returned 0x0
	[0119.111] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="thumbs.db") returned 0x0
	[0119.111] StrStrW (lpFirst="q_zfszpd-qz67g.m4a", lpSrch="swapfile.sys") returned 0x0
	[0119.111] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\q_ZFszPd-Qz67G.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\q_zfszpd-qz67g.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0119.111] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=41696) returned 1
	[0119.111] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.111] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.121] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0119.121] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0119.121] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0119.122] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0119.122] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0119.122] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.130] GetLastError () returned 0x3e5
	[0119.130] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0119.130] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f983230, ftCreationTime.dwHighDateTime=0x1d5e749, ftLastAccessTime.dwLowDateTime=0x7caff980, ftLastAccessTime.dwHighDateTime=0x1d5dd4f, ftLastWriteTime.dwLowDateTime=0x7caff980, ftLastWriteTime.dwHighDateTime=0x1d5dd4f, nFileSizeHigh=0x0, nFileSizeLow=0xa2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="q_zfszpd-qz67g.m4a", cAlternateFileName="Q_ZFSZ~1.M4A")) returned 0
	[0119.130] FindClose (in: hFindFile=0x61ea50 | out: hFindFile=0x61ea50) returned 1
	[0119.130] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0119.130] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0119.130] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0119.130] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0119.130] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\FmHlph98Kx4634Gw6S\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\fmhlph98kx4634gw6s\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0119.131] WriteFile (in: hFile=0x3e0, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e1e4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e1e4*=0x512, lpOverlapped=0x0) returned 1
	[0119.131] CloseHandle (hObject=0x3e0) returned 1
	[0119.132] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0119.132] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0119.132] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0119.132] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0119.132] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9378e0, ftCreationTime.dwHighDateTime=0x1d5dfb1, ftLastAccessTime.dwLowDateTime=0xefb487f0, ftLastAccessTime.dwHighDateTime=0x1d5e5a8, ftLastWriteTime.dwLowDateTime=0xefb487f0, ftLastWriteTime.dwHighDateTime=0x1d5e5a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kX1n2Xe4uKw", cAlternateFileName="KX1N2X~1")) returned 1
	[0119.132] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0119.132] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0119.132] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0119.132] lstrcmpW (lpString1="..", lpString2="kX1n2Xe4uKw") returned -1
	[0119.132] lstrcmpW (lpString1=".", lpString2="kX1n2Xe4uKw") returned -1
	[0119.132] StrStrW (lpFirst="kx1n2xe4ukw", lpSrch="programdata") returned 0x0
	[0119.132] StrStrW (lpFirst="kx1n2xe4ukw", lpSrch="$recycle.bin") returned 0x0
	[0119.132] StrStrW (lpFirst="kx1n2xe4ukw", lpSrch="program files") returned 0x0
	[0119.132] StrStrW (lpFirst="kx1n2xe4ukw", lpSrch="windows") returned 0x0
	[0119.132] StrStrW (lpFirst="kx1n2xe4ukw", lpSrch="all users") returned 0x0
	[0119.132] StrStrW (lpFirst="kx1n2xe4ukw", lpSrch="winnt") returned 0x0
	[0119.132] StrStrW (lpFirst="kx1n2xe4ukw", lpSrch="appdata") returned 0x0
	[0119.132] StrStrW (lpFirst="kx1n2xe4ukw", lpSrch="application data") returned 0x0
	[0119.132] StrStrW (lpFirst="kx1n2xe4ukw", lpSrch="local settings") returned 0x0
	[0119.132] StrStrW (lpFirst="kx1n2xe4ukw", lpSrch="boot") returned 0x0
	[0119.132] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0119.132] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0119.132] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\*", lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9378e0, ftCreationTime.dwHighDateTime=0x1d5dfb1, ftLastAccessTime.dwLowDateTime=0xefb487f0, ftLastAccessTime.dwHighDateTime=0x1d5e5a8, ftLastWriteTime.dwLowDateTime=0xefb487f0, ftLastWriteTime.dwHighDateTime=0x1d5e5a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea50
	[0119.133] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0119.133] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0119.133] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0119.133] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0119.133] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.133] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.133] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0119.133] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9378e0, ftCreationTime.dwHighDateTime=0x1d5dfb1, ftLastAccessTime.dwLowDateTime=0xefb487f0, ftLastAccessTime.dwHighDateTime=0x1d5e5a8, ftLastWriteTime.dwLowDateTime=0xefb487f0, ftLastWriteTime.dwHighDateTime=0x1d5e5a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0119.133] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0119.133] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0119.133] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0119.133] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.133] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0119.133] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f93ea0, ftCreationTime.dwHighDateTime=0x1d5e6df, ftLastAccessTime.dwLowDateTime=0x21df1430, ftLastAccessTime.dwHighDateTime=0x1d5e1ac, ftLastWriteTime.dwLowDateTime=0x21df1430, ftLastWriteTime.dwHighDateTime=0x1d5e1ac, nFileSizeHigh=0x0, nFileSizeLow=0x638d, dwReserved0=0x0, dwReserved1=0x0, cFileName="-MgDAYK0z.wav", cAlternateFileName="-MGDAY~1.WAV")) returned 1
	[0119.133] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0119.133] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0119.133] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0119.133] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.133] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="ntldr") returned 0x0
	[0119.133] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="pagefile.sys") returned 0x0
	[0119.133] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="ntdetect.com") returned 0x0
	[0119.133] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="autoexec.bat") returned 0x0
	[0119.133] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="desktop.ini") returned 0x0
	[0119.133] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="autorun.inf") returned 0x0
	[0119.134] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="ntuser.dat") returned 0x0
	[0119.134] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="iconcache.db") returned 0x0
	[0119.134] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="bootsect.bak") returned 0x0
	[0119.134] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="boot.ini") returned 0x0
	[0119.134] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="bootfont.bin") returned 0x0
	[0119.134] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="config.sys") returned 0x0
	[0119.134] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="io.sys") returned 0x0
	[0119.134] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="msdos.sys") returned 0x0
	[0119.134] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0119.134] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="thumbs.db") returned 0x0
	[0119.134] StrStrW (lpFirst="-mgdayk0z.wav", lpSrch="swapfile.sys") returned 0x0
	[0119.134] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\-MgDAYK0z.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\-mgdayk0z.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0119.134] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=25485) returned 1
	[0119.134] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.134] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.147] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0119.147] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0119.147] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633220) returned 1
	[0119.148] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0119.148] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0119.148] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.158] GetLastError () returned 0x3e5
	[0119.158] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0119.158] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b29020, ftCreationTime.dwHighDateTime=0x1d5d84a, ftLastAccessTime.dwLowDateTime=0xd187e6d0, ftLastAccessTime.dwHighDateTime=0x1d5e285, ftLastWriteTime.dwLowDateTime=0xd187e6d0, ftLastWriteTime.dwHighDateTime=0x1d5e285, nFileSizeHigh=0x0, nFileSizeLow=0x149a, dwReserved0=0x0, dwReserved1=0x0, cFileName="1dmWA6r9Nh7wG.m4a", cAlternateFileName="1DMWA6~1.M4A")) returned 1
	[0119.158] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0119.158] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0119.158] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0119.158] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.158] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="ntldr") returned 0x0
	[0119.158] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="pagefile.sys") returned 0x0
	[0119.158] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="ntdetect.com") returned 0x0
	[0119.158] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="autoexec.bat") returned 0x0
	[0119.158] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="desktop.ini") returned 0x0
	[0119.158] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="autorun.inf") returned 0x0
	[0119.158] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="ntuser.dat") returned 0x0
	[0119.159] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="iconcache.db") returned 0x0
	[0119.159] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="bootsect.bak") returned 0x0
	[0119.159] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="boot.ini") returned 0x0
	[0119.159] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="bootfont.bin") returned 0x0
	[0119.159] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="config.sys") returned 0x0
	[0119.159] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="io.sys") returned 0x0
	[0119.159] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="msdos.sys") returned 0x0
	[0119.159] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="ntuser.dat.log") returned 0x0
	[0119.159] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="thumbs.db") returned 0x0
	[0119.159] StrStrW (lpFirst="1dmwa6r9nh7wg.m4a", lpSrch="swapfile.sys") returned 0x0
	[0119.159] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\1dmWA6r9Nh7wG.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\1dmwa6r9nh7wg.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0119.159] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=5274) returned 1
	[0119.159] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.159] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.170] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0119.170] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0119.170] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633220) returned 1
	[0119.171] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0119.171] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0119.171] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.177] GetLastError () returned 0x3e5
	[0119.177] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0119.177] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7444750, ftCreationTime.dwHighDateTime=0x1d5e158, ftLastAccessTime.dwLowDateTime=0x26629bf0, ftLastAccessTime.dwHighDateTime=0x1d5e169, ftLastWriteTime.dwLowDateTime=0x26629bf0, ftLastWriteTime.dwHighDateTime=0x1d5e169, nFileSizeHigh=0x0, nFileSizeLow=0x12521, dwReserved0=0x0, dwReserved1=0x0, cFileName="2byfYz2uPKKvbZg3U4.mp3", cAlternateFileName="2BYFYZ~1.MP3")) returned 1
	[0119.177] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0119.177] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0119.177] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="ntldr") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="pagefile.sys") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="ntdetect.com") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="autoexec.bat") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="desktop.ini") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="autorun.inf") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="ntuser.dat") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="iconcache.db") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="bootsect.bak") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="boot.ini") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="bootfont.bin") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="config.sys") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="io.sys") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="msdos.sys") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0119.177] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="thumbs.db") returned 0x0
	[0119.178] StrStrW (lpFirst="2byfyz2upkkvbzg3u4.mp3", lpSrch="swapfile.sys") returned 0x0
	[0119.178] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\2byfYz2uPKKvbZg3U4.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\2byfyz2upkkvbzg3u4.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0119.178] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=75041) returned 1
	[0119.178] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.178] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.188] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0119.188] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0119.188] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633220) returned 1
	[0119.189] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0119.189] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0119.189] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.199] GetLastError () returned 0x3e5
	[0119.199] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0119.199] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da37500, ftCreationTime.dwHighDateTime=0x1d5e773, ftLastAccessTime.dwLowDateTime=0x2bb14ee0, ftLastAccessTime.dwHighDateTime=0x1d5e2c6, ftLastWriteTime.dwLowDateTime=0x2bb14ee0, ftLastWriteTime.dwHighDateTime=0x1d5e2c6, nFileSizeHigh=0x0, nFileSizeLow=0x8c02, dwReserved0=0x0, dwReserved1=0x0, cFileName="OdqPcGho.m4a", cAlternateFileName="")) returned 1
	[0119.199] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0119.199] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0119.199] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="ntldr") returned 0x0
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="pagefile.sys") returned 0x0
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="ntdetect.com") returned 0x0
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="autoexec.bat") returned 0x0
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="desktop.ini") returned 0x0
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="autorun.inf") returned 0x0
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="ntuser.dat") returned 0x0
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="iconcache.db") returned 0x0
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="bootsect.bak") returned 0x0
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="boot.ini") returned 0x0
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="bootfont.bin") returned 0x0
	[0119.199] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="config.sys") returned 0x0
	[0119.200] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="io.sys") returned 0x0
	[0119.200] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="msdos.sys") returned 0x0
	[0119.200] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="ntuser.dat.log") returned 0x0
	[0119.200] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="thumbs.db") returned 0x0
	[0119.200] StrStrW (lpFirst="odqpcgho.m4a", lpSrch="swapfile.sys") returned 0x0
	[0119.200] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\OdqPcGho.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\odqpcgho.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0119.200] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=35842) returned 1
	[0119.200] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.200] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.401] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0119.401] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0119.401] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633220) returned 1
	[0119.402] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0119.402] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0119.402] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.411] GetLastError () returned 0x3e5
	[0119.411] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0119.411] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a40f50, ftCreationTime.dwHighDateTime=0x1d5ddf2, ftLastAccessTime.dwLowDateTime=0x857c3850, ftLastAccessTime.dwHighDateTime=0x1d5e04a, ftLastWriteTime.dwLowDateTime=0x857c3850, ftLastWriteTime.dwHighDateTime=0x1d5e04a, nFileSizeHigh=0x0, nFileSizeLow=0x1064e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rKuSjn.m4a", cAlternateFileName="")) returned 1
	[0119.411] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0119.411] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0119.411] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0119.411] StrStrW (lpFirst="rkusjn.m4a", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.411] StrStrW (lpFirst="rkusjn.m4a", lpSrch="ntldr") returned 0x0
	[0119.411] StrStrW (lpFirst="rkusjn.m4a", lpSrch="pagefile.sys") returned 0x0
	[0119.411] StrStrW (lpFirst="rkusjn.m4a", lpSrch="ntdetect.com") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="autoexec.bat") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="desktop.ini") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="autorun.inf") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="ntuser.dat") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="iconcache.db") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="bootsect.bak") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="boot.ini") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="bootfont.bin") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="config.sys") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="io.sys") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="msdos.sys") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="ntuser.dat.log") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="thumbs.db") returned 0x0
	[0119.412] StrStrW (lpFirst="rkusjn.m4a", lpSrch="swapfile.sys") returned 0x0
	[0119.413] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\rKuSjn.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\rkusjn.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0119.413] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=67150) returned 1
	[0119.413] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.413] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.425] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0119.426] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0119.426] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633220) returned 1
	[0119.427] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0119.427] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0119.427] ReadFile (in: hFile=0x38c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.436] GetLastError () returned 0x3e5
	[0119.436] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0119.436] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a40f50, ftCreationTime.dwHighDateTime=0x1d5ddf2, ftLastAccessTime.dwLowDateTime=0x857c3850, ftLastAccessTime.dwHighDateTime=0x1d5e04a, ftLastWriteTime.dwLowDateTime=0x857c3850, ftLastWriteTime.dwHighDateTime=0x1d5e04a, nFileSizeHigh=0x0, nFileSizeLow=0x1064e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rkusjn.m4a", cAlternateFileName="")) returned 0
	[0119.437] FindClose (in: hFindFile=0x61ea50 | out: hFindFile=0x61ea50) returned 1
	[0119.437] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0119.437] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0119.437] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0119.437] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0119.437] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\kX1n2Xe4uKw\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\kx1n2xe4ukw\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0119.437] WriteFile (in: hFile=0x3e0, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e1e4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e1e4*=0x512, lpOverlapped=0x0) returned 1
	[0119.438] CloseHandle (hObject=0x3e0) returned 1
	[0119.439] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0119.439] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0119.439] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0119.439] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0119.439] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f90c9f0, ftCreationTime.dwHighDateTime=0x1d5da9e, ftLastAccessTime.dwLowDateTime=0x346be6d0, ftLastAccessTime.dwHighDateTime=0x1d5e0a5, ftLastWriteTime.dwLowDateTime=0x346be6d0, ftLastWriteTime.dwHighDateTime=0x1d5e0a5, nFileSizeHigh=0x0, nFileSizeLow=0x4672, dwReserved0=0x0, dwReserved1=0x0, cFileName="m1 mEnSp52t.wav", cAlternateFileName="M1MENS~1.WAV")) returned 1
	[0119.439] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0119.439] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0119.439] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0119.439] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.439] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="ntldr") returned 0x0
	[0119.439] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="pagefile.sys") returned 0x0
	[0119.439] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="ntdetect.com") returned 0x0
	[0119.439] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="autoexec.bat") returned 0x0
	[0119.439] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="desktop.ini") returned 0x0
	[0119.440] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="autorun.inf") returned 0x0
	[0119.440] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="ntuser.dat") returned 0x0
	[0119.440] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="iconcache.db") returned 0x0
	[0119.440] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="bootsect.bak") returned 0x0
	[0119.440] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="boot.ini") returned 0x0
	[0119.440] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="bootfont.bin") returned 0x0
	[0119.440] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="config.sys") returned 0x0
	[0119.440] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="io.sys") returned 0x0
	[0119.440] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="msdos.sys") returned 0x0
	[0119.440] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0119.440] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="thumbs.db") returned 0x0
	[0119.440] StrStrW (lpFirst="m1 mensp52t.wav", lpSrch="swapfile.sys") returned 0x0
	[0119.440] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\m1 mEnSp52t.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\m1 mensp52t.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0119.440] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=18034) returned 1
	[0119.441] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.442] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.453] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0119.454] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0119.454] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0119.455] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0119.455] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0119.455] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.462] GetLastError () returned 0x3e5
	[0119.462] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0119.462] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd626250, ftCreationTime.dwHighDateTime=0x1d5e3cd, ftLastAccessTime.dwLowDateTime=0x37fe9d00, ftLastAccessTime.dwHighDateTime=0x1d5dd90, ftLastWriteTime.dwLowDateTime=0x37fe9d00, ftLastWriteTime.dwHighDateTime=0x1d5dd90, nFileSizeHigh=0x0, nFileSizeLow=0x2c37, dwReserved0=0x0, dwReserved1=0x0, cFileName="PuM-ucRL1l_Qt-4l.wav", cAlternateFileName="PUM-UC~1.WAV")) returned 1
	[0119.462] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0119.463] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0119.463] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="ntldr") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="pagefile.sys") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="ntdetect.com") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="autoexec.bat") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="desktop.ini") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="autorun.inf") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="ntuser.dat") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="iconcache.db") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="bootsect.bak") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="boot.ini") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="bootfont.bin") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="config.sys") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="io.sys") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="msdos.sys") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="ntuser.dat.log") returned 0x0
	[0119.463] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="thumbs.db") returned 0x0
	[0119.464] StrStrW (lpFirst="pum-ucrl1l_qt-4l.wav", lpSrch="swapfile.sys") returned 0x0
	[0119.464] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\PuM-ucRL1l_Qt-4l.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\pum-ucrl1l_qt-4l.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0119.464] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=11319) returned 1
	[0119.464] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.464] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.476] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0119.476] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0119.477] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0119.478] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0119.478] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0119.478] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0119.479] GetLastError () returned 0x3e5
	[0119.479] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0119.479] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461b57c0, ftCreationTime.dwHighDateTime=0x1d5e1cd, ftLastAccessTime.dwLowDateTime=0x19347080, ftLastAccessTime.dwHighDateTime=0x1d5e5eb, ftLastWriteTime.dwLowDateTime=0x19347080, ftLastWriteTime.dwHighDateTime=0x1d5e5eb, nFileSizeHigh=0x0, nFileSizeLow=0x160b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xJa2_yk_SCYjO.mp3", cAlternateFileName="XJA2_Y~1.MP3")) returned 1
	[0119.479] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0119.479] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0119.479] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0119.479] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.479] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="ntldr") returned 0x0
	[0119.479] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="pagefile.sys") returned 0x0
	[0119.479] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="ntdetect.com") returned 0x0
	[0119.479] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="autoexec.bat") returned 0x0
	[0119.479] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="desktop.ini") returned 0x0
	[0119.479] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="autorun.inf") returned 0x0
	[0119.479] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="ntuser.dat") returned 0x0
	[0119.479] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="iconcache.db") returned 0x0
	[0119.480] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="bootsect.bak") returned 0x0
	[0119.480] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="boot.ini") returned 0x0
	[0119.480] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="bootfont.bin") returned 0x0
	[0119.480] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="config.sys") returned 0x0
	[0119.480] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="io.sys") returned 0x0
	[0119.480] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="msdos.sys") returned 0x0
	[0119.480] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0119.480] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="thumbs.db") returned 0x0
	[0119.480] StrStrW (lpFirst="xja2_yk_scyjo.mp3", lpSrch="swapfile.sys") returned 0x0
	[0119.480] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\xJa2_yk_SCYjO.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\xja2_yk_scyjo.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0119.480] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=5643) returned 1
	[0119.480] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.480] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0119.502] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0119.502] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0119.502] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0119.504] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0119.504] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0119.504] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0119.510] GetLastError () returned 0x3e5
	[0119.510] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0119.510] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461b57c0, ftCreationTime.dwHighDateTime=0x1d5e1cd, ftLastAccessTime.dwLowDateTime=0x19347080, ftLastAccessTime.dwHighDateTime=0x1d5e5eb, ftLastWriteTime.dwLowDateTime=0x19347080, ftLastWriteTime.dwHighDateTime=0x1d5e5eb, nFileSizeHigh=0x0, nFileSizeLow=0x160b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xja2_yk_scyjo.mp3", cAlternateFileName="XJA2_Y~1.MP3")) returned 0
	[0119.511] FindClose (in: hFindFile=0x61e950 | out: hFindFile=0x61e950) returned 1
	[0119.511] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0119.511] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0119.511] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0119.511] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0119.511] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\JXWmkX\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\jxwmkx\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0119.511] WriteFile (in: hFile=0x3ec, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e514, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e514*=0x512, lpOverlapped=0x0) returned 1
	[0119.513] CloseHandle (hObject=0x3ec) returned 1
	[0119.513] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0119.513] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0119.513] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0119.513] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0119.513] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe506ff0, ftCreationTime.dwHighDateTime=0x1d5df80, ftLastAccessTime.dwLowDateTime=0xcaba7f50, ftLastAccessTime.dwHighDateTime=0x1d5e179, ftLastWriteTime.dwLowDateTime=0xcaba7f50, ftLastWriteTime.dwHighDateTime=0x1d5e179, nFileSizeHigh=0x0, nFileSizeLow=0xe5d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="UzWFP0ndt2.mp3", cAlternateFileName="UZWFP0~1.MP3")) returned 1
	[0119.513] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0119.513] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0119.513] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0119.513] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.513] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="ntldr") returned 0x0
	[0119.513] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="pagefile.sys") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="ntdetect.com") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="autoexec.bat") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="desktop.ini") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="autorun.inf") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="ntuser.dat") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="iconcache.db") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="bootsect.bak") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="boot.ini") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="bootfont.bin") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="config.sys") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="io.sys") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="msdos.sys") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="thumbs.db") returned 0x0
	[0119.514] StrStrW (lpFirst="uzwfp0ndt2.mp3", lpSrch="swapfile.sys") returned 0x0
	[0119.514] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\UzWFP0ndt2.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\uzwfp0ndt2.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0119.515] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=58839) returned 1
	[0119.515] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.515] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0119.528] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0119.528] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0119.528] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0119.529] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0119.529] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0119.530] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0119.783] GetLastError () returned 0x3e5
	[0119.783] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0119.783] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe506ff0, ftCreationTime.dwHighDateTime=0x1d5df80, ftLastAccessTime.dwLowDateTime=0xcaba7f50, ftLastAccessTime.dwHighDateTime=0x1d5e179, ftLastWriteTime.dwLowDateTime=0xcaba7f50, ftLastWriteTime.dwHighDateTime=0x1d5e179, nFileSizeHigh=0x0, nFileSizeLow=0xe5d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="uzwfp0ndt2.mp3", cAlternateFileName="UZWFP0~1.MP3")) returned 0
	[0119.783] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0119.784] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0119.784] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0119.784] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0119.784] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0119.784] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QLs1xK\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qls1xk\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0119.785] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0119.786] CloseHandle (hObject=0x3d8) returned 1
	[0119.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0119.787] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0119.787] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0119.787] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0119.787] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdaa600, ftCreationTime.dwHighDateTime=0x1d5d8fa, ftLastAccessTime.dwLowDateTime=0x15239180, ftLastAccessTime.dwHighDateTime=0x1d5e06c, ftLastWriteTime.dwLowDateTime=0x15239180, ftLastWriteTime.dwHighDateTime=0x1d5e06c, nFileSizeHigh=0x0, nFileSizeLow=0x7944, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S9k76DxGawRsOI.m4a", cAlternateFileName="S9K76D~1.M4A")) returned 1
	[0119.787] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0119.787] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0119.787] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0119.787] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.787] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="ntldr") returned 0x0
	[0119.787] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="pagefile.sys") returned 0x0
	[0119.787] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="ntdetect.com") returned 0x0
	[0119.787] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="autoexec.bat") returned 0x0
	[0119.787] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="desktop.ini") returned 0x0
	[0119.787] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="autorun.inf") returned 0x0
	[0119.787] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="ntuser.dat") returned 0x0
	[0119.787] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="iconcache.db") returned 0x0
	[0119.787] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="bootsect.bak") returned 0x0
	[0119.788] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="boot.ini") returned 0x0
	[0119.788] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="bootfont.bin") returned 0x0
	[0119.788] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="config.sys") returned 0x0
	[0119.788] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="io.sys") returned 0x0
	[0119.788] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="msdos.sys") returned 0x0
	[0119.788] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="ntuser.dat.log") returned 0x0
	[0119.788] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="thumbs.db") returned 0x0
	[0119.788] StrStrW (lpFirst="s9k76dxgawrsoi.m4a", lpSrch="swapfile.sys") returned 0x0
	[0119.788] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\S9k76DxGawRsOI.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\s9k76dxgawrsoi.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0119.788] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=31044) returned 1
	[0119.788] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.788] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.801] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0119.801] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0119.801] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0119.802] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0119.802] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0119.802] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.811] GetLastError () returned 0x3e5
	[0119.811] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0119.811] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f103ec0, ftCreationTime.dwHighDateTime=0x1d5df9a, ftLastAccessTime.dwLowDateTime=0x17a96380, ftLastAccessTime.dwHighDateTime=0x1d5de73, ftLastWriteTime.dwLowDateTime=0x17a96380, ftLastWriteTime.dwHighDateTime=0x1d5de73, nFileSizeHigh=0x0, nFileSizeLow=0x7819, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="to BsoN2x7xRb.mp3", cAlternateFileName="TOBSON~1.MP3")) returned 1
	[0119.811] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0119.811] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0119.811] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="ntldr") returned 0x0
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="pagefile.sys") returned 0x0
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="ntdetect.com") returned 0x0
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="autoexec.bat") returned 0x0
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="desktop.ini") returned 0x0
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="autorun.inf") returned 0x0
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="ntuser.dat") returned 0x0
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="iconcache.db") returned 0x0
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="bootsect.bak") returned 0x0
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="boot.ini") returned 0x0
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="bootfont.bin") returned 0x0
	[0119.811] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="config.sys") returned 0x0
	[0119.812] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="io.sys") returned 0x0
	[0119.812] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="msdos.sys") returned 0x0
	[0119.812] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0119.812] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="thumbs.db") returned 0x0
	[0119.812] StrStrW (lpFirst="to bson2x7xrb.mp3", lpSrch="swapfile.sys") returned 0x0
	[0119.812] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\to BsoN2x7xRb.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\to bson2x7xrb.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0119.812] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=30745) returned 1
	[0119.812] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.812] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.825] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0119.825] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0119.825] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0119.826] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0119.826] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0119.827] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.834] GetLastError () returned 0x3e5
	[0119.834] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0119.834] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f103ec0, ftCreationTime.dwHighDateTime=0x1d5df9a, ftLastAccessTime.dwLowDateTime=0x17a96380, ftLastAccessTime.dwHighDateTime=0x1d5de73, ftLastWriteTime.dwLowDateTime=0x17a96380, ftLastWriteTime.dwHighDateTime=0x1d5de73, nFileSizeHigh=0x0, nFileSizeLow=0x7819, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="to bson2x7xrb.mp3", cAlternateFileName="TOBSON~1.MP3")) returned 0
	[0119.834] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0119.834] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0119.834] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0119.834] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0119.834] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0119.834] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0119.835] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0119.836] CloseHandle (hObject=0x3bc) returned 1
	[0119.836] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0119.836] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0119.836] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0119.836] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0119.836] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0119.836] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0119.836] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0119.836] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0119.836] lstrcmpW (lpString1="..", lpString2="My Documents") returned -1
	[0119.837] lstrcmpW (lpString1=".", lpString2="My Documents") returned -1
	[0119.837] StrStrW (lpFirst="my documents", lpSrch="programdata") returned 0x0
	[0119.837] StrStrW (lpFirst="my documents", lpSrch="$recycle.bin") returned 0x0
	[0119.837] StrStrW (lpFirst="my documents", lpSrch="program files") returned 0x0
	[0119.837] StrStrW (lpFirst="my documents", lpSrch="windows") returned 0x0
	[0119.837] StrStrW (lpFirst="my documents", lpSrch="all users") returned 0x0
	[0119.837] StrStrW (lpFirst="my documents", lpSrch="winnt") returned 0x0
	[0119.837] StrStrW (lpFirst="my documents", lpSrch="appdata") returned 0x0
	[0119.837] StrStrW (lpFirst="my documents", lpSrch="application data") returned 0x0
	[0119.837] StrStrW (lpFirst="my documents", lpSrch="local settings") returned 0x0
	[0119.837] StrStrW (lpFirst="my documents", lpSrch="boot") returned 0x0
	[0119.837] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0119.837] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0119.837] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f103ec0, ftCreationTime.dwHighDateTime=0x1d5df9a, ftLastAccessTime.dwLowDateTime=0x17a96380, ftLastAccessTime.dwHighDateTime=0x1d5de73, ftLastWriteTime.dwLowDateTime=0x17a96380, ftLastWriteTime.dwHighDateTime=0x1d5de73, nFileSizeHigh=0x0, nFileSizeLow=0x7819, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="to bson2x7xrb.mp3", cAlternateFileName="又c勸cX")) returned 0xffffffff
	[0119.838] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0119.838] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0119.838] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0119.838] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0119.838] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0119.838] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0119.838] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0119.838] lstrcmpW (lpString1="..", lpString2="NetHood") returned -1
	[0119.838] lstrcmpW (lpString1=".", lpString2="NetHood") returned -1
	[0119.838] StrStrW (lpFirst="nethood", lpSrch="programdata") returned 0x0
	[0119.838] StrStrW (lpFirst="nethood", lpSrch="$recycle.bin") returned 0x0
	[0119.838] StrStrW (lpFirst="nethood", lpSrch="program files") returned 0x0
	[0119.838] StrStrW (lpFirst="nethood", lpSrch="windows") returned 0x0
	[0119.838] StrStrW (lpFirst="nethood", lpSrch="all users") returned 0x0
	[0119.838] StrStrW (lpFirst="nethood", lpSrch="winnt") returned 0x0
	[0119.838] StrStrW (lpFirst="nethood", lpSrch="appdata") returned 0x0
	[0119.838] StrStrW (lpFirst="nethood", lpSrch="application data") returned 0x0
	[0119.838] StrStrW (lpFirst="nethood", lpSrch="local settings") returned 0x0
	[0119.838] StrStrW (lpFirst="nethood", lpSrch="boot") returned 0x0
	[0119.838] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0119.838] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0119.839] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f103ec0, ftCreationTime.dwHighDateTime=0x1d5df9a, ftLastAccessTime.dwLowDateTime=0x17a96380, ftLastAccessTime.dwHighDateTime=0x1d5de73, ftLastWriteTime.dwLowDateTime=0x17a96380, ftLastWriteTime.dwHighDateTime=0x1d5de73, nFileSizeHigh=0x0, nFileSizeLow=0x7819, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="to bson2x7xrb.mp3", cAlternateFileName="䮸d勸cN")) returned 0xffffffff
	[0119.839] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0119.839] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0119.839] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0119.839] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3afd80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8f3afd80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0119.839] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0119.839] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0119.839] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0119.839] StrStrW (lpFirst="ntuser.dat", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.839] StrStrW (lpFirst="ntuser.dat", lpSrch="ntldr") returned 0x0
	[0119.839] StrStrW (lpFirst="ntuser.dat", lpSrch="pagefile.sys") returned 0x0
	[0119.839] StrStrW (lpFirst="ntuser.dat", lpSrch="ntdetect.com") returned 0x0
	[0119.839] StrStrW (lpFirst="ntuser.dat", lpSrch="autoexec.bat") returned 0x0
	[0119.839] StrStrW (lpFirst="ntuser.dat", lpSrch="desktop.ini") returned 0x0
	[0119.839] StrStrW (lpFirst="ntuser.dat", lpSrch="autorun.inf") returned 0x0
	[0119.839] StrStrW (lpFirst="ntuser.dat", lpSrch="ntuser.dat") returned="ntuser.dat"
	[0119.840] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0119.840] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8f389c20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0119.840] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0119.840] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0119.840] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0119.840] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.840] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="ntldr") returned 0x0
	[0119.840] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="pagefile.sys") returned 0x0
	[0119.840] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="ntdetect.com") returned 0x0
	[0119.840] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="autoexec.bat") returned 0x0
	[0119.840] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="desktop.ini") returned 0x0
	[0119.840] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="autorun.inf") returned 0x0
	[0119.840] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="ntuser.dat") returned="ntuser.dat.log1"
	[0119.840] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0119.840] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
	[0119.840] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0119.840] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0119.840] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0119.840] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.840] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="ntldr") returned 0x0
	[0119.840] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="pagefile.sys") returned 0x0
	[0119.841] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="ntdetect.com") returned 0x0
	[0119.841] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="autoexec.bat") returned 0x0
	[0119.841] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="desktop.ini") returned 0x0
	[0119.841] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="autorun.inf") returned 0x0
	[0119.841] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="ntuser.dat") returned="ntuser.dat.log2"
	[0119.841] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0119.841] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
	[0119.841] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0119.841] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0119.841] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0119.841] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.841] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="ntldr") returned 0x0
	[0119.841] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="pagefile.sys") returned 0x0
	[0119.841] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="ntdetect.com") returned 0x0
	[0119.841] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="autoexec.bat") returned 0x0
	[0119.841] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="desktop.ini") returned 0x0
	[0119.841] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="autorun.inf") returned 0x0
	[0119.841] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="ntuser.dat") returned="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"
	[0119.841] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522d90 | out: hHeap=0x5f0000) returned 1
	[0119.841] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
	[0119.841] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0119.842] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x40819f8
	[0119.842] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0119.842] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.842] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="ntldr") returned 0x0
	[0119.842] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="pagefile.sys") returned 0x0
	[0119.842] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="ntdetect.com") returned 0x0
	[0119.842] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="autoexec.bat") returned 0x0
	[0119.842] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="desktop.ini") returned 0x0
	[0119.842] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="autorun.inf") returned 0x0
	[0119.842] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="ntuser.dat") returned="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"
	[0119.842] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0119.842] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
	[0119.842] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0119.842] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x100) returned 0x40819f8
	[0119.842] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0119.842] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.842] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="ntldr") returned 0x0
	[0119.842] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="pagefile.sys") returned 0x0
	[0119.842] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="ntdetect.com") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="autoexec.bat") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="desktop.ini") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="autorun.inf") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="ntuser.dat") returned="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"
	[0119.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0119.843] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
	[0119.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0119.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0119.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0119.843] StrStrW (lpFirst="ntuser.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.ini", lpSrch="ntldr") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.ini", lpSrch="pagefile.sys") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.ini", lpSrch="ntdetect.com") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.ini", lpSrch="autoexec.bat") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.ini", lpSrch="desktop.ini") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.ini", lpSrch="autorun.inf") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.ini", lpSrch="ntuser.dat") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.ini", lpSrch="iconcache.db") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.ini", lpSrch="bootsect.bak") returned 0x0
	[0119.843] StrStrW (lpFirst="ntuser.ini", lpSrch="boot.ini") returned 0x0
	[0119.844] StrStrW (lpFirst="ntuser.ini", lpSrch="bootfont.bin") returned 0x0
	[0119.844] StrStrW (lpFirst="ntuser.ini", lpSrch="config.sys") returned 0x0
	[0119.844] StrStrW (lpFirst="ntuser.ini", lpSrch="io.sys") returned 0x0
	[0119.844] StrStrW (lpFirst="ntuser.ini", lpSrch="msdos.sys") returned 0x0
	[0119.844] StrStrW (lpFirst="ntuser.ini", lpSrch="ntuser.dat.log") returned 0x0
	[0119.844] StrStrW (lpFirst="ntuser.ini", lpSrch="thumbs.db") returned 0x0
	[0119.844] StrStrW (lpFirst="ntuser.ini", lpSrch="swapfile.sys") returned 0x0
	[0119.844] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3bc
	[0119.845] GetFileSizeEx (in: hFile=0x3bc, lpFileSize=0x3f6ede8 | out: lpFileSize=0x3f6ede8*=20) returned 1
	[0119.845] CreateIoCompletionPort (FileHandle=0x3bc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.845] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.857] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0119.857] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0119.857] CryptAcquireContextW (in: phProv=0x3f6eabc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6eabc*=0x633220) returned 1
	[0119.858] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6ead0 | out: pbBuffer=0x3f6ead0) returned 1
	[0119.858] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0119.859] ReadFile (in: hFile=0x3bc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0119.980] GetLastError () returned 0x3e5
	[0119.980] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0119.980] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc46ce60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc46ce60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0119.980] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0119.980] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0119.981] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0119.981] lstrcmpW (lpString1="..", lpString2="Pictures") returned -1
	[0119.981] lstrcmpW (lpString1=".", lpString2="Pictures") returned -1
	[0119.981] StrStrW (lpFirst="pictures", lpSrch="programdata") returned 0x0
	[0119.981] StrStrW (lpFirst="pictures", lpSrch="$recycle.bin") returned 0x0
	[0119.981] StrStrW (lpFirst="pictures", lpSrch="program files") returned 0x0
	[0119.981] StrStrW (lpFirst="pictures", lpSrch="windows") returned 0x0
	[0119.981] StrStrW (lpFirst="pictures", lpSrch="all users") returned 0x0
	[0119.981] StrStrW (lpFirst="pictures", lpSrch="winnt") returned 0x0
	[0119.981] StrStrW (lpFirst="pictures", lpSrch="appdata") returned 0x0
	[0119.981] StrStrW (lpFirst="pictures", lpSrch="application data") returned 0x0
	[0119.981] StrStrW (lpFirst="pictures", lpSrch="local settings") returned 0x0
	[0119.981] StrStrW (lpFirst="pictures", lpSrch="boot") returned 0x0
	[0119.981] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0119.981] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0119.981] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc46ce60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc46ce60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0119.982] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0119.982] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0119.982] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0119.982] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0119.982] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0119.982] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc46ce60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc46ce60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0119.982] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0119.982] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0119.982] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0119.982] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a303f50, ftCreationTime.dwHighDateTime=0x1d5e002, ftLastAccessTime.dwLowDateTime=0xbe811180, ftLastAccessTime.dwHighDateTime=0x1d5e666, ftLastWriteTime.dwLowDateTime=0xbe811180, ftLastWriteTime.dwHighDateTime=0x1d5e666, nFileSizeHigh=0x0, nFileSizeLow=0x8e81, dwReserved0=0x0, dwReserved1=0x0, cFileName="3OsNwneKQKhgA6sbZ.gif", cAlternateFileName="3OSNWN~1.GIF")) returned 1
	[0119.982] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0119.982] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0119.982] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0119.982] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0119.982] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="ntldr") returned 0x0
	[0119.982] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="pagefile.sys") returned 0x0
	[0119.982] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="ntdetect.com") returned 0x0
	[0119.982] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="autoexec.bat") returned 0x0
	[0119.982] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="desktop.ini") returned 0x0
	[0119.982] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="autorun.inf") returned 0x0
	[0119.982] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="ntuser.dat") returned 0x0
	[0119.983] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="iconcache.db") returned 0x0
	[0119.983] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="bootsect.bak") returned 0x0
	[0119.983] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="boot.ini") returned 0x0
	[0119.983] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="bootfont.bin") returned 0x0
	[0119.983] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="config.sys") returned 0x0
	[0119.983] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="io.sys") returned 0x0
	[0119.983] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="msdos.sys") returned 0x0
	[0119.983] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0119.983] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="thumbs.db") returned 0x0
	[0119.983] StrStrW (lpFirst="3osnwnekqkhga6sbz.gif", lpSrch="swapfile.sys") returned 0x0
	[0119.983] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\3OsNwneKQKhgA6sbZ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\3osnwnekqkhga6sbz.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0119.983] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=36481) returned 1
	[0119.983] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0119.984] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0119.996] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0119.996] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0119.996] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0119.997] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0119.997] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0119.997] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0120.005] GetLastError () returned 0x3e5
	[0120.005] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0120.005] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7c2bd50, ftCreationTime.dwHighDateTime=0x1d5df21, ftLastAccessTime.dwLowDateTime=0x22f280d0, ftLastAccessTime.dwHighDateTime=0x1d5e65e, ftLastWriteTime.dwLowDateTime=0x22f280d0, ftLastWriteTime.dwHighDateTime=0x1d5e65e, nFileSizeHigh=0x0, nFileSizeLow=0x52e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4dww4uo5p.gif", cAlternateFileName="4DWW4U~1.GIF")) returned 1
	[0120.005] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0120.005] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0120.005] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0120.005] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="ntldr") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="pagefile.sys") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="ntdetect.com") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="autoexec.bat") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="desktop.ini") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="autorun.inf") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="ntuser.dat") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="iconcache.db") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="bootsect.bak") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="boot.ini") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="bootfont.bin") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="config.sys") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="io.sys") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="msdos.sys") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="thumbs.db") returned 0x0
	[0120.006] StrStrW (lpFirst="4dww4uo5p.gif", lpSrch="swapfile.sys") returned 0x0
	[0120.007] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\4dww4uo5p.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\4dww4uo5p.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0120.007] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=21223) returned 1
	[0120.007] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.007] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0120.020] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.020] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0120.020] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0120.021] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0120.022] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0120.022] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0120.244] GetLastError () returned 0x3e5
	[0120.244] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0120.244] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdda58a0, ftCreationTime.dwHighDateTime=0x1d5e097, ftLastAccessTime.dwLowDateTime=0x7afd2bd0, ftLastAccessTime.dwHighDateTime=0x1d5de80, ftLastWriteTime.dwLowDateTime=0x7afd2bd0, ftLastWriteTime.dwHighDateTime=0x1d5de80, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6awojlas2cZnv", cAlternateFileName="6AWOJL~1")) returned 1
	[0120.245] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0120.245] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0120.245] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0120.245] lstrcmpW (lpString1="..", lpString2="6awojlas2cZnv") returned -1
	[0120.245] lstrcmpW (lpString1=".", lpString2="6awojlas2cZnv") returned -1
	[0120.245] StrStrW (lpFirst="6awojlas2cznv", lpSrch="programdata") returned 0x0
	[0120.245] StrStrW (lpFirst="6awojlas2cznv", lpSrch="$recycle.bin") returned 0x0
	[0120.245] StrStrW (lpFirst="6awojlas2cznv", lpSrch="program files") returned 0x0
	[0120.245] StrStrW (lpFirst="6awojlas2cznv", lpSrch="windows") returned 0x0
	[0120.245] StrStrW (lpFirst="6awojlas2cznv", lpSrch="all users") returned 0x0
	[0120.245] StrStrW (lpFirst="6awojlas2cznv", lpSrch="winnt") returned 0x0
	[0120.245] StrStrW (lpFirst="6awojlas2cznv", lpSrch="appdata") returned 0x0
	[0120.245] StrStrW (lpFirst="6awojlas2cznv", lpSrch="application data") returned 0x0
	[0120.245] StrStrW (lpFirst="6awojlas2cznv", lpSrch="local settings") returned 0x0
	[0120.245] StrStrW (lpFirst="6awojlas2cznv", lpSrch="boot") returned 0x0
	[0120.245] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0120.246] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.246] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdda58a0, ftCreationTime.dwHighDateTime=0x1d5e097, ftLastAccessTime.dwLowDateTime=0x7afd2bd0, ftLastAccessTime.dwHighDateTime=0x1d5de80, ftLastWriteTime.dwLowDateTime=0x7afd2bd0, ftLastWriteTime.dwHighDateTime=0x1d5de80, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0120.246] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.246] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.246] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0120.246] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0120.246] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.246] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdda58a0, ftCreationTime.dwHighDateTime=0x1d5e097, ftLastAccessTime.dwLowDateTime=0x7afd2bd0, ftLastAccessTime.dwHighDateTime=0x1d5de80, ftLastWriteTime.dwLowDateTime=0x7afd2bd0, ftLastWriteTime.dwHighDateTime=0x1d5de80, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0120.246] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.246] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0120.246] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.246] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0120.247] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0120.247] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ee469e0, ftCreationTime.dwHighDateTime=0x1d5e1dc, ftLastAccessTime.dwLowDateTime=0xc830e000, ftLastAccessTime.dwHighDateTime=0x1d5e794, ftLastWriteTime.dwLowDateTime=0xc830e000, ftLastWriteTime.dwHighDateTime=0x1d5e794, nFileSizeHigh=0x0, nFileSizeLow=0x5554, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADPZqqaMpsHc83h.bmp", cAlternateFileName="ADPZQQ~1.BMP")) returned 1
	[0120.247] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.247] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0120.247] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="ntldr") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="pagefile.sys") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="ntdetect.com") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="autoexec.bat") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="desktop.ini") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="autorun.inf") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="ntuser.dat") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="iconcache.db") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="bootsect.bak") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="boot.ini") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="bootfont.bin") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="config.sys") returned 0x0
	[0120.247] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="io.sys") returned 0x0
	[0120.248] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="msdos.sys") returned 0x0
	[0120.248] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0120.248] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="thumbs.db") returned 0x0
	[0120.248] StrStrW (lpFirst="adpzqqampshc83h.bmp", lpSrch="swapfile.sys") returned 0x0
	[0120.248] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\ADPZqqaMpsHc83h.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\adpzqqampshc83h.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0120.248] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=21844) returned 1
	[0120.248] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.248] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0120.263] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0120.263] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0120.263] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0120.264] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0120.264] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0120.265] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0120.269] GetLastError () returned 0x3e5
	[0120.269] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0120.269] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbac24290, ftCreationTime.dwHighDateTime=0x1d5e0c5, ftLastAccessTime.dwLowDateTime=0x158439d0, ftLastAccessTime.dwHighDateTime=0x1d5ddd4, ftLastWriteTime.dwLowDateTime=0x158439d0, ftLastWriteTime.dwHighDateTime=0x1d5ddd4, nFileSizeHigh=0x0, nFileSizeLow=0x17476, dwReserved0=0x0, dwReserved1=0x0, cFileName="AVZwnLmqhlVWG.gif", cAlternateFileName="AVZWNL~1.GIF")) returned 1
	[0120.269] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.269] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0120.269] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="ntldr") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="pagefile.sys") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="ntdetect.com") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="autoexec.bat") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="desktop.ini") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="autorun.inf") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="ntuser.dat") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="iconcache.db") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="bootsect.bak") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="boot.ini") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="bootfont.bin") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="config.sys") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="io.sys") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="msdos.sys") returned 0x0
	[0120.270] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0120.271] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="thumbs.db") returned 0x0
	[0120.271] StrStrW (lpFirst="avzwnlmqhlvwg.gif", lpSrch="swapfile.sys") returned 0x0
	[0120.271] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\AVZwnLmqhlVWG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\avzwnlmqhlvwg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0120.271] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=95350) returned 1
	[0120.271] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.271] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0120.285] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639fc8
	[0120.285] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0120.286] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0120.287] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0120.287] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0120.287] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0120.288] GetLastError () returned 0x3e5
	[0120.288] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0120.288] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20b22e50, ftCreationTime.dwHighDateTime=0x1d5d827, ftLastAccessTime.dwLowDateTime=0xc76470e0, ftLastAccessTime.dwHighDateTime=0x1d5e476, ftLastWriteTime.dwLowDateTime=0xc76470e0, ftLastWriteTime.dwHighDateTime=0x1d5e476, nFileSizeHigh=0x0, nFileSizeLow=0x4cc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bCE e6y.bmp", cAlternateFileName="BCEE6Y~1.BMP")) returned 1
	[0120.288] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.288] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0120.288] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.288] StrStrW (lpFirst="bce e6y.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.288] StrStrW (lpFirst="bce e6y.bmp", lpSrch="ntldr") returned 0x0
	[0120.288] StrStrW (lpFirst="bce e6y.bmp", lpSrch="pagefile.sys") returned 0x0
	[0120.288] StrStrW (lpFirst="bce e6y.bmp", lpSrch="ntdetect.com") returned 0x0
	[0120.288] StrStrW (lpFirst="bce e6y.bmp", lpSrch="autoexec.bat") returned 0x0
	[0120.288] StrStrW (lpFirst="bce e6y.bmp", lpSrch="desktop.ini") returned 0x0
	[0120.288] StrStrW (lpFirst="bce e6y.bmp", lpSrch="autorun.inf") returned 0x0
	[0120.289] StrStrW (lpFirst="bce e6y.bmp", lpSrch="ntuser.dat") returned 0x0
	[0120.289] StrStrW (lpFirst="bce e6y.bmp", lpSrch="iconcache.db") returned 0x0
	[0120.289] StrStrW (lpFirst="bce e6y.bmp", lpSrch="bootsect.bak") returned 0x0
	[0120.289] StrStrW (lpFirst="bce e6y.bmp", lpSrch="boot.ini") returned 0x0
	[0120.289] StrStrW (lpFirst="bce e6y.bmp", lpSrch="bootfont.bin") returned 0x0
	[0120.289] StrStrW (lpFirst="bce e6y.bmp", lpSrch="config.sys") returned 0x0
	[0120.289] StrStrW (lpFirst="bce e6y.bmp", lpSrch="io.sys") returned 0x0
	[0120.289] StrStrW (lpFirst="bce e6y.bmp", lpSrch="msdos.sys") returned 0x0
	[0120.289] StrStrW (lpFirst="bce e6y.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0120.289] StrStrW (lpFirst="bce e6y.bmp", lpSrch="thumbs.db") returned 0x0
	[0120.289] StrStrW (lpFirst="bce e6y.bmp", lpSrch="swapfile.sys") returned 0x0
	[0120.289] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\bCE e6y.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\bce e6y.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0120.290] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=19654) returned 1
	[0120.290] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.290] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0120.304] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0120.304] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d7f0
	[0120.304] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0120.305] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0120.305] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0120.305] ReadFile (in: hFile=0x38c, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0120.306] GetLastError () returned 0x3e5
	[0120.306] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0120.306] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705aa00, ftCreationTime.dwHighDateTime=0x1d5dc4a, ftLastAccessTime.dwLowDateTime=0x8779e970, ftLastAccessTime.dwHighDateTime=0x1d5db2e, ftLastWriteTime.dwLowDateTime=0x8779e970, ftLastWriteTime.dwHighDateTime=0x1d5db2e, nFileSizeHigh=0x0, nFileSizeLow=0x110cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EtS _h68PSriZ.jpg", cAlternateFileName="ETS_H6~1.JPG")) returned 1
	[0120.306] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.306] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0120.306] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.306] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.306] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="ntldr") returned 0x0
	[0120.306] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="pagefile.sys") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="ntdetect.com") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="autoexec.bat") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="desktop.ini") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="autorun.inf") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="ntuser.dat") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="iconcache.db") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="bootsect.bak") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="boot.ini") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="bootfont.bin") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="config.sys") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="io.sys") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="msdos.sys") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="thumbs.db") returned 0x0
	[0120.307] StrStrW (lpFirst="ets _h68psriz.jpg", lpSrch="swapfile.sys") returned 0x0
	[0120.308] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\EtS _h68PSriZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\ets _h68psriz.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x37c
	[0120.308] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=69837) returned 1
	[0120.308] CreateIoCompletionPort (FileHandle=0x37c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.308] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4ab0020
	[0120.324] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0120.324] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x4042048
	[0120.324] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0120.325] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0120.325] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0120.326] ReadFile (in: hFile=0x37c, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0120.327] GetLastError () returned 0x3e5
	[0120.327] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0120.327] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58262b00, ftCreationTime.dwHighDateTime=0x1d5dd56, ftLastAccessTime.dwLowDateTime=0xc0601e40, ftLastAccessTime.dwHighDateTime=0x1d5deb1, ftLastWriteTime.dwLowDateTime=0xc0601e40, ftLastWriteTime.dwHighDateTime=0x1d5deb1, nFileSizeHigh=0x0, nFileSizeLow=0x3a1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="KjHEn8WtqmnWqXr.bmp", cAlternateFileName="KJHEN8~1.BMP")) returned 1
	[0120.327] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.327] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0120.327] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.327] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.327] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="ntldr") returned 0x0
	[0120.327] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="pagefile.sys") returned 0x0
	[0120.327] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="ntdetect.com") returned 0x0
	[0120.327] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="autoexec.bat") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="desktop.ini") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="autorun.inf") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="ntuser.dat") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="iconcache.db") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="bootsect.bak") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="boot.ini") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="bootfont.bin") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="config.sys") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="io.sys") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="msdos.sys") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="thumbs.db") returned 0x0
	[0120.328] StrStrW (lpFirst="kjhen8wtqmnwqxr.bmp", lpSrch="swapfile.sys") returned 0x0
	[0120.329] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\KjHEn8WtqmnWqXr.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\kjhen8wtqmnwqxr.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0120.329] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=14874) returned 1
	[0120.329] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.329] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4bb0020
	[0120.345] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0120.345] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0120.424] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0120.425] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0120.425] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0120.425] ReadFile (in: hFile=0x3dc, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 0
	[0120.433] GetLastError () returned 0x3e5
	[0120.433] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0120.434] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780b00b0, ftCreationTime.dwHighDateTime=0x1d5e4dd, ftLastAccessTime.dwLowDateTime=0xe8408bf0, ftLastAccessTime.dwHighDateTime=0x1d5e246, ftLastWriteTime.dwLowDateTime=0xe8408bf0, ftLastWriteTime.dwHighDateTime=0x1d5e246, nFileSizeHigh=0x0, nFileSizeLow=0xad23, dwReserved0=0x0, dwReserved1=0x0, cFileName="qEywyL.gif", cAlternateFileName="")) returned 1
	[0120.434] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.434] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0120.434] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="ntldr") returned 0x0
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="pagefile.sys") returned 0x0
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="ntdetect.com") returned 0x0
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="autoexec.bat") returned 0x0
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="desktop.ini") returned 0x0
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="autorun.inf") returned 0x0
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="ntuser.dat") returned 0x0
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="iconcache.db") returned 0x0
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="bootsect.bak") returned 0x0
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="boot.ini") returned 0x0
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="bootfont.bin") returned 0x0
	[0120.434] StrStrW (lpFirst="qeywyl.gif", lpSrch="config.sys") returned 0x0
	[0120.435] StrStrW (lpFirst="qeywyl.gif", lpSrch="io.sys") returned 0x0
	[0120.435] StrStrW (lpFirst="qeywyl.gif", lpSrch="msdos.sys") returned 0x0
	[0120.435] StrStrW (lpFirst="qeywyl.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0120.435] StrStrW (lpFirst="qeywyl.gif", lpSrch="thumbs.db") returned 0x0
	[0120.435] StrStrW (lpFirst="qeywyl.gif", lpSrch="swapfile.sys") returned 0x0
	[0120.435] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\qEywyL.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\qeywyl.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0120.435] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=44323) returned 1
	[0120.435] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.435] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0120.448] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0120.448] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0120.448] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0120.449] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0120.449] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0120.449] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0120.458] GetLastError () returned 0x3e5
	[0120.459] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0120.459] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780b00b0, ftCreationTime.dwHighDateTime=0x1d5e4dd, ftLastAccessTime.dwLowDateTime=0xe8408bf0, ftLastAccessTime.dwHighDateTime=0x1d5e246, ftLastWriteTime.dwLowDateTime=0xe8408bf0, ftLastWriteTime.dwHighDateTime=0x1d5e246, nFileSizeHigh=0x0, nFileSizeLow=0xad23, dwReserved0=0x0, dwReserved1=0x0, cFileName="qeywyl.gif", cAlternateFileName="")) returned 0
	[0120.459] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0120.459] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0120.459] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.459] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0120.459] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0120.459] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\6awojlas2cZnv\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\6awojlas2cznv\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0120.459] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0120.462] CloseHandle (hObject=0x3d8) returned 1
	[0120.462] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0120.462] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0120.462] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0120.463] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0120.463] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f840c60, ftCreationTime.dwHighDateTime=0x1d5d88d, ftLastAccessTime.dwLowDateTime=0x21102060, ftLastAccessTime.dwHighDateTime=0x1d5e2e9, ftLastWriteTime.dwLowDateTime=0x21102060, ftLastWriteTime.dwHighDateTime=0x1d5e2e9, nFileSizeHigh=0x0, nFileSizeLow=0x3422, dwReserved0=0x0, dwReserved1=0x0, cFileName="c8q8iM.jpg", cAlternateFileName="")) returned 1
	[0120.463] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0120.463] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0120.463] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="ntldr") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="pagefile.sys") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="ntdetect.com") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="autoexec.bat") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="desktop.ini") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="autorun.inf") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="ntuser.dat") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="iconcache.db") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="bootsect.bak") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="boot.ini") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="bootfont.bin") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="config.sys") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="io.sys") returned 0x0
	[0120.463] StrStrW (lpFirst="c8q8im.jpg", lpSrch="msdos.sys") returned 0x0
	[0120.464] StrStrW (lpFirst="c8q8im.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0120.464] StrStrW (lpFirst="c8q8im.jpg", lpSrch="thumbs.db") returned 0x0
	[0120.464] StrStrW (lpFirst="c8q8im.jpg", lpSrch="swapfile.sys") returned 0x0
	[0120.464] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\c8q8iM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\c8q8im.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0120.464] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=13346) returned 1
	[0120.464] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.464] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0120.477] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0120.477] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0120.477] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0120.478] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0120.478] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0120.478] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0120.487] GetLastError () returned 0x3e5
	[0120.487] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0120.487] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0120.487] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0120.487] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0120.487] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0120.487] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.487] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0120.487] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0120.487] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0120.487] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0120.487] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0120.487] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0120.487] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c125a0, ftCreationTime.dwHighDateTime=0x1d5dd69, ftLastAccessTime.dwLowDateTime=0x2774f740, ftLastAccessTime.dwHighDateTime=0x1d5dacf, ftLastWriteTime.dwLowDateTime=0x2774f740, ftLastWriteTime.dwHighDateTime=0x1d5dacf, nFileSizeHigh=0x0, nFileSizeLow=0x2d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="DUsFXU.jpg", cAlternateFileName="")) returned 1
	[0120.487] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0120.487] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0120.487] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="ntldr") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="pagefile.sys") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="ntdetect.com") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="autoexec.bat") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="desktop.ini") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="autorun.inf") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="ntuser.dat") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="iconcache.db") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="bootsect.bak") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="boot.ini") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="bootfont.bin") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="config.sys") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="io.sys") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="msdos.sys") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="thumbs.db") returned 0x0
	[0120.488] StrStrW (lpFirst="dusfxu.jpg", lpSrch="swapfile.sys") returned 0x0
	[0120.488] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DUsFXU.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dusfxu.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0120.489] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=11527) returned 1
	[0120.489] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.489] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0120.501] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.501] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0120.501] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0120.503] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0120.503] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0120.503] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0120.514] GetLastError () returned 0x3e5
	[0120.514] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0120.514] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e966b30, ftCreationTime.dwHighDateTime=0x1d5df83, ftLastAccessTime.dwLowDateTime=0x1a90fef0, ftLastAccessTime.dwHighDateTime=0x1d5da95, ftLastWriteTime.dwLowDateTime=0x1a90fef0, ftLastWriteTime.dwHighDateTime=0x1d5da95, nFileSizeHigh=0x0, nFileSizeLow=0x12904, dwReserved0=0x0, dwReserved1=0x0, cFileName="iMLZwd4Mt.bmp", cAlternateFileName="IMLZWD~1.BMP")) returned 1
	[0120.514] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0120.514] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0120.514] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0120.514] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.514] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="ntldr") returned 0x0
	[0120.514] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="pagefile.sys") returned 0x0
	[0120.514] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="ntdetect.com") returned 0x0
	[0120.514] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="autoexec.bat") returned 0x0
	[0120.514] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="desktop.ini") returned 0x0
	[0120.514] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="autorun.inf") returned 0x0
	[0120.514] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="ntuser.dat") returned 0x0
	[0120.515] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="iconcache.db") returned 0x0
	[0120.515] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="bootsect.bak") returned 0x0
	[0120.515] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="boot.ini") returned 0x0
	[0120.515] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="bootfont.bin") returned 0x0
	[0120.516] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="config.sys") returned 0x0
	[0120.516] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="io.sys") returned 0x0
	[0120.516] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="msdos.sys") returned 0x0
	[0120.516] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0120.516] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="thumbs.db") returned 0x0
	[0120.516] StrStrW (lpFirst="imlzwd4mt.bmp", lpSrch="swapfile.sys") returned 0x0
	[0120.516] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\iMLZwd4Mt.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\imlzwd4mt.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0120.516] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=76036) returned 1
	[0120.516] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.516] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0120.529] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0120.529] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0120.529] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0120.530] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0120.530] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0120.530] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0120.540] GetLastError () returned 0x3e5
	[0120.540] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0120.540] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5ae2270, ftCreationTime.dwHighDateTime=0x1d5e4d1, ftLastAccessTime.dwLowDateTime=0x5ff7ec00, ftLastAccessTime.dwHighDateTime=0x1d5e1f8, ftLastWriteTime.dwLowDateTime=0x5ff7ec00, ftLastWriteTime.dwHighDateTime=0x1d5e1f8, nFileSizeHigh=0x0, nFileSizeLow=0x97e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="IttO.bmp", cAlternateFileName="")) returned 1
	[0120.540] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0120.540] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0120.540] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0120.540] StrStrW (lpFirst="itto.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.540] StrStrW (lpFirst="itto.bmp", lpSrch="ntldr") returned 0x0
	[0120.540] StrStrW (lpFirst="itto.bmp", lpSrch="pagefile.sys") returned 0x0
	[0120.540] StrStrW (lpFirst="itto.bmp", lpSrch="ntdetect.com") returned 0x0
	[0120.540] StrStrW (lpFirst="itto.bmp", lpSrch="autoexec.bat") returned 0x0
	[0120.540] StrStrW (lpFirst="itto.bmp", lpSrch="desktop.ini") returned 0x0
	[0120.540] StrStrW (lpFirst="itto.bmp", lpSrch="autorun.inf") returned 0x0
	[0120.540] StrStrW (lpFirst="itto.bmp", lpSrch="ntuser.dat") returned 0x0
	[0120.540] StrStrW (lpFirst="itto.bmp", lpSrch="iconcache.db") returned 0x0
	[0120.540] StrStrW (lpFirst="itto.bmp", lpSrch="bootsect.bak") returned 0x0
	[0120.541] StrStrW (lpFirst="itto.bmp", lpSrch="boot.ini") returned 0x0
	[0120.541] StrStrW (lpFirst="itto.bmp", lpSrch="bootfont.bin") returned 0x0
	[0120.541] StrStrW (lpFirst="itto.bmp", lpSrch="config.sys") returned 0x0
	[0120.541] StrStrW (lpFirst="itto.bmp", lpSrch="io.sys") returned 0x0
	[0120.541] StrStrW (lpFirst="itto.bmp", lpSrch="msdos.sys") returned 0x0
	[0120.541] StrStrW (lpFirst="itto.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0120.541] StrStrW (lpFirst="itto.bmp", lpSrch="thumbs.db") returned 0x0
	[0120.541] StrStrW (lpFirst="itto.bmp", lpSrch="swapfile.sys") returned 0x0
	[0120.541] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\IttO.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\itto.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0120.541] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=38887) returned 1
	[0120.541] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.541] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0120.553] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0120.553] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0120.554] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0120.555] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0120.555] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0120.555] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0120.562] GetLastError () returned 0x3e5
	[0120.562] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0120.563] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0644230, ftCreationTime.dwHighDateTime=0x1d5db43, ftLastAccessTime.dwLowDateTime=0x15f2b9e0, ftLastAccessTime.dwHighDateTime=0x1d5e4b5, ftLastWriteTime.dwLowDateTime=0x15f2b9e0, ftLastWriteTime.dwHighDateTime=0x1d5e4b5, nFileSizeHigh=0x0, nFileSizeLow=0x16fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="M_M0VLOO2_Zp.gif", cAlternateFileName="M_M0VL~1.GIF")) returned 1
	[0120.563] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0120.563] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0120.563] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="ntldr") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="pagefile.sys") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="ntdetect.com") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="autoexec.bat") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="desktop.ini") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="autorun.inf") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="ntuser.dat") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="iconcache.db") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="bootsect.bak") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="boot.ini") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="bootfont.bin") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="config.sys") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="io.sys") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="msdos.sys") returned 0x0
	[0120.563] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0120.564] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="thumbs.db") returned 0x0
	[0120.564] StrStrW (lpFirst="m_m0vloo2_zp.gif", lpSrch="swapfile.sys") returned 0x0
	[0120.564] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\M_M0VLOO2_Zp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\m_m0vloo2_zp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0120.565] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=94181) returned 1
	[0120.565] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.565] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0120.577] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0120.577] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0120.577] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0120.578] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0120.578] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0120.578] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0120.846] GetLastError () returned 0x3e5
	[0120.846] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0120.846] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69690140, ftCreationTime.dwHighDateTime=0x1d5ddeb, ftLastAccessTime.dwLowDateTime=0x28c87cc0, ftLastAccessTime.dwHighDateTime=0x1d5da34, ftLastWriteTime.dwLowDateTime=0x28c87cc0, ftLastWriteTime.dwHighDateTime=0x1d5da34, nFileSizeHigh=0x0, nFileSizeLow=0x2cd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="RvLA6oRpZxL.bmp", cAlternateFileName="RVLA6O~1.BMP")) returned 1
	[0120.847] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0120.847] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0120.847] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="ntldr") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="pagefile.sys") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="ntdetect.com") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="autoexec.bat") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="desktop.ini") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="autorun.inf") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="ntuser.dat") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="iconcache.db") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="bootsect.bak") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="boot.ini") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="bootfont.bin") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="config.sys") returned 0x0
	[0120.847] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="io.sys") returned 0x0
	[0120.848] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="msdos.sys") returned 0x0
	[0120.848] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0120.848] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="thumbs.db") returned 0x0
	[0120.848] StrStrW (lpFirst="rvla6orpzxl.bmp", lpSrch="swapfile.sys") returned 0x0
	[0120.848] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\RvLA6oRpZxL.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rvla6orpzxl.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0120.848] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=11475) returned 1
	[0120.848] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.848] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0120.859] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0120.859] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0120.859] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0120.860] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0120.860] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0120.920] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0120.960] GetLastError () returned 0x3e5
	[0120.960] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0120.960] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27a6a0f0, ftCreationTime.dwHighDateTime=0x1d5da53, ftLastAccessTime.dwLowDateTime=0xf7b5ab80, ftLastAccessTime.dwHighDateTime=0x1d5d871, ftLastWriteTime.dwLowDateTime=0xf7b5ab80, ftLastWriteTime.dwHighDateTime=0x1d5d871, nFileSizeHigh=0x0, nFileSizeLow=0x87b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="s2CnFc5DPooT.png", cAlternateFileName="S2CNFC~1.PNG")) returned 1
	[0120.960] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0120.960] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0120.960] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="ntldr") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="pagefile.sys") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="ntdetect.com") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="autoexec.bat") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="desktop.ini") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="autorun.inf") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="ntuser.dat") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="iconcache.db") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="bootsect.bak") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="boot.ini") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="bootfont.bin") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="config.sys") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="io.sys") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="msdos.sys") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="ntuser.dat.log") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="thumbs.db") returned 0x0
	[0120.961] StrStrW (lpFirst="s2cnfc5dpoot.png", lpSrch="swapfile.sys") returned 0x0
	[0120.961] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\s2CnFc5DPooT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s2cnfc5dpoot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0120.962] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=34744) returned 1
	[0120.962] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0120.962] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0120.980] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0120.980] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0120.980] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0120.981] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0120.981] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0120.981] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0121.057] GetLastError () returned 0x3e5
	[0121.057] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0121.057] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbabcd230, ftCreationTime.dwHighDateTime=0x1d5e424, ftLastAccessTime.dwLowDateTime=0x56953640, ftLastAccessTime.dwHighDateTime=0x1d5e2f2, ftLastWriteTime.dwLowDateTime=0x56953640, ftLastWriteTime.dwHighDateTime=0x1d5e2f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uGTa3LCJnT", cAlternateFileName="UGTA3L~1")) returned 1
	[0121.057] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0121.058] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0121.058] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0121.058] lstrcmpW (lpString1="..", lpString2="uGTa3LCJnT") returned -1
	[0121.058] lstrcmpW (lpString1=".", lpString2="uGTa3LCJnT") returned -1
	[0121.058] StrStrW (lpFirst="ugta3lcjnt", lpSrch="programdata") returned 0x0
	[0121.058] StrStrW (lpFirst="ugta3lcjnt", lpSrch="$recycle.bin") returned 0x0
	[0121.058] StrStrW (lpFirst="ugta3lcjnt", lpSrch="program files") returned 0x0
	[0121.058] StrStrW (lpFirst="ugta3lcjnt", lpSrch="windows") returned 0x0
	[0121.058] StrStrW (lpFirst="ugta3lcjnt", lpSrch="all users") returned 0x0
	[0121.058] StrStrW (lpFirst="ugta3lcjnt", lpSrch="winnt") returned 0x0
	[0121.058] StrStrW (lpFirst="ugta3lcjnt", lpSrch="appdata") returned 0x0
	[0121.058] StrStrW (lpFirst="ugta3lcjnt", lpSrch="application data") returned 0x0
	[0121.058] StrStrW (lpFirst="ugta3lcjnt", lpSrch="local settings") returned 0x0
	[0121.058] StrStrW (lpFirst="ugta3lcjnt", lpSrch="boot") returned 0x0
	[0121.058] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0121.058] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0121.058] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbabcd230, ftCreationTime.dwHighDateTime=0x1d5e424, ftLastAccessTime.dwLowDateTime=0x56953640, ftLastAccessTime.dwHighDateTime=0x1d5e2f2, ftLastWriteTime.dwLowDateTime=0x56953640, ftLastWriteTime.dwHighDateTime=0x1d5e2f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0121.059] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0121.059] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0121.059] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0121.059] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0121.059] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0121.059] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbabcd230, ftCreationTime.dwHighDateTime=0x1d5e424, ftLastAccessTime.dwLowDateTime=0x56953640, ftLastAccessTime.dwHighDateTime=0x1d5e2f2, ftLastWriteTime.dwLowDateTime=0x56953640, ftLastWriteTime.dwHighDateTime=0x1d5e2f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.059] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0121.059] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0121.059] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0121.059] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78447400, ftCreationTime.dwHighDateTime=0x1d5e3dc, ftLastAccessTime.dwLowDateTime=0xdf889530, ftLastAccessTime.dwHighDateTime=0x1d5e75e, ftLastWriteTime.dwLowDateTime=0xdf889530, ftLastWriteTime.dwHighDateTime=0x1d5e75e, nFileSizeHigh=0x0, nFileSizeLow=0x8b6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="9-kiKSk07WNiitE.png", cAlternateFileName="9-KIKS~1.PNG")) returned 1
	[0121.059] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0121.059] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0121.059] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0121.059] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.059] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="ntldr") returned 0x0
	[0121.059] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="pagefile.sys") returned 0x0
	[0121.059] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="ntdetect.com") returned 0x0
	[0121.059] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="autoexec.bat") returned 0x0
	[0121.059] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="desktop.ini") returned 0x0
	[0121.059] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="autorun.inf") returned 0x0
	[0121.059] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="ntuser.dat") returned 0x0
	[0121.060] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="iconcache.db") returned 0x0
	[0121.060] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="bootsect.bak") returned 0x0
	[0121.060] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="boot.ini") returned 0x0
	[0121.060] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="bootfont.bin") returned 0x0
	[0121.060] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="config.sys") returned 0x0
	[0121.060] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="io.sys") returned 0x0
	[0121.060] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="msdos.sys") returned 0x0
	[0121.060] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="ntuser.dat.log") returned 0x0
	[0121.060] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="thumbs.db") returned 0x0
	[0121.060] StrStrW (lpFirst="9-kiksk07wniite.png", lpSrch="swapfile.sys") returned 0x0
	[0121.060] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\9-kiKSk07WNiitE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\9-kiksk07wniite.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0121.060] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=35694) returned 1
	[0121.060] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.060] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0121.072] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0121.072] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0121.072] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0121.073] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0121.073] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0121.073] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0121.099] GetLastError () returned 0x3e5
	[0121.099] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0121.099] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55f7d9b0, ftCreationTime.dwHighDateTime=0x1d5e011, ftLastAccessTime.dwLowDateTime=0x6851c1b0, ftLastAccessTime.dwHighDateTime=0x1d5e53a, ftLastWriteTime.dwLowDateTime=0x6851c1b0, ftLastWriteTime.dwHighDateTime=0x1d5e53a, nFileSizeHigh=0x0, nFileSizeLow=0x9dca, dwReserved0=0x0, dwReserved1=0x0, cFileName="aQmW2.png", cAlternateFileName="")) returned 1
	[0121.100] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0121.100] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0121.100] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0121.100] StrStrW (lpFirst="aqmw2.png", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.100] StrStrW (lpFirst="aqmw2.png", lpSrch="ntldr") returned 0x0
	[0121.100] StrStrW (lpFirst="aqmw2.png", lpSrch="pagefile.sys") returned 0x0
	[0121.100] StrStrW (lpFirst="aqmw2.png", lpSrch="ntdetect.com") returned 0x0
	[0121.100] StrStrW (lpFirst="aqmw2.png", lpSrch="autoexec.bat") returned 0x0
	[0121.100] StrStrW (lpFirst="aqmw2.png", lpSrch="desktop.ini") returned 0x0
	[0121.100] StrStrW (lpFirst="aqmw2.png", lpSrch="autorun.inf") returned 0x0
	[0121.100] StrStrW (lpFirst="aqmw2.png", lpSrch="ntuser.dat") returned 0x0
	[0121.100] StrStrW (lpFirst="aqmw2.png", lpSrch="iconcache.db") returned 0x0
	[0121.101] StrStrW (lpFirst="aqmw2.png", lpSrch="bootsect.bak") returned 0x0
	[0121.101] StrStrW (lpFirst="aqmw2.png", lpSrch="boot.ini") returned 0x0
	[0121.101] StrStrW (lpFirst="aqmw2.png", lpSrch="bootfont.bin") returned 0x0
	[0121.101] StrStrW (lpFirst="aqmw2.png", lpSrch="config.sys") returned 0x0
	[0121.101] StrStrW (lpFirst="aqmw2.png", lpSrch="io.sys") returned 0x0
	[0121.101] StrStrW (lpFirst="aqmw2.png", lpSrch="msdos.sys") returned 0x0
	[0121.101] StrStrW (lpFirst="aqmw2.png", lpSrch="ntuser.dat.log") returned 0x0
	[0121.101] StrStrW (lpFirst="aqmw2.png", lpSrch="thumbs.db") returned 0x0
	[0121.101] StrStrW (lpFirst="aqmw2.png", lpSrch="swapfile.sys") returned 0x0
	[0121.101] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\aQmW2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\aqmw2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0121.102] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=40394) returned 1
	[0121.102] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.102] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0121.115] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.115] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0121.115] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0121.116] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0121.116] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0121.116] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0121.128] GetLastError () returned 0x3e5
	[0121.128] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0121.128] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x470655c0, ftCreationTime.dwHighDateTime=0x1d5e4c7, ftLastAccessTime.dwLowDateTime=0x7040a40, ftLastAccessTime.dwHighDateTime=0x1d5e638, ftLastWriteTime.dwLowDateTime=0x7040a40, ftLastWriteTime.dwHighDateTime=0x1d5e638, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DM-dwtZxr", cAlternateFileName="DM-DWT~1")) returned 1
	[0121.128] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0121.128] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0121.128] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0121.128] lstrcmpW (lpString1="..", lpString2="DM-dwtZxr") returned -1
	[0121.128] lstrcmpW (lpString1=".", lpString2="DM-dwtZxr") returned -1
	[0121.128] StrStrW (lpFirst="dm-dwtzxr", lpSrch="programdata") returned 0x0
	[0121.128] StrStrW (lpFirst="dm-dwtzxr", lpSrch="$recycle.bin") returned 0x0
	[0121.128] StrStrW (lpFirst="dm-dwtzxr", lpSrch="program files") returned 0x0
	[0121.128] StrStrW (lpFirst="dm-dwtzxr", lpSrch="windows") returned 0x0
	[0121.128] StrStrW (lpFirst="dm-dwtzxr", lpSrch="all users") returned 0x0
	[0121.129] StrStrW (lpFirst="dm-dwtzxr", lpSrch="winnt") returned 0x0
	[0121.129] StrStrW (lpFirst="dm-dwtzxr", lpSrch="appdata") returned 0x0
	[0121.129] StrStrW (lpFirst="dm-dwtzxr", lpSrch="application data") returned 0x0
	[0121.129] StrStrW (lpFirst="dm-dwtzxr", lpSrch="local settings") returned 0x0
	[0121.129] StrStrW (lpFirst="dm-dwtzxr", lpSrch="boot") returned 0x0
	[0121.129] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0121.129] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.129] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\*", lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x470655c0, ftCreationTime.dwHighDateTime=0x1d5e4c7, ftLastAccessTime.dwLowDateTime=0x7040a40, ftLastAccessTime.dwHighDateTime=0x1d5e638, ftLastWriteTime.dwLowDateTime=0x7040a40, ftLastWriteTime.dwHighDateTime=0x1d5e638, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e950
	[0121.129] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.129] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.129] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0121.129] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0121.129] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.129] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x470655c0, ftCreationTime.dwHighDateTime=0x1d5e4c7, ftLastAccessTime.dwLowDateTime=0x7040a40, ftLastAccessTime.dwHighDateTime=0x1d5e638, ftLastWriteTime.dwLowDateTime=0x7040a40, ftLastWriteTime.dwHighDateTime=0x1d5e638, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.129] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.129] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0121.129] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.130] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a48b40, ftCreationTime.dwHighDateTime=0x1d5da74, ftLastAccessTime.dwLowDateTime=0xb23a32f0, ftLastAccessTime.dwHighDateTime=0x1d5e24f, ftLastWriteTime.dwLowDateTime=0xb23a32f0, ftLastWriteTime.dwHighDateTime=0x1d5e24f, nFileSizeHigh=0x0, nFileSizeLow=0xc65e, dwReserved0=0x0, dwReserved1=0x0, cFileName="gwIa15KOiIB.jpg", cAlternateFileName="GWIA15~1.JPG")) returned 1
	[0121.130] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.130] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0121.130] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="ntldr") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="pagefile.sys") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="ntdetect.com") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="autoexec.bat") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="desktop.ini") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="autorun.inf") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="ntuser.dat") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="iconcache.db") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="bootsect.bak") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="boot.ini") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="bootfont.bin") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="config.sys") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="io.sys") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="msdos.sys") returned 0x0
	[0121.130] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0121.131] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="thumbs.db") returned 0x0
	[0121.131] StrStrW (lpFirst="gwia15koiib.jpg", lpSrch="swapfile.sys") returned 0x0
	[0121.131] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\gwIa15KOiIB.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\gwia15koiib.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x37c
	[0121.131] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=50782) returned 1
	[0121.131] CreateIoCompletionPort (FileHandle=0x37c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.131] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0121.167] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0121.167] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0121.167] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0121.168] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0121.169] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0121.169] ReadFile (in: hFile=0x37c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0121.180] GetLastError () returned 0x3e5
	[0121.180] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0121.180] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0bdd350, ftCreationTime.dwHighDateTime=0x1d5e730, ftLastAccessTime.dwLowDateTime=0x92bcba60, ftLastAccessTime.dwHighDateTime=0x1d5ded5, ftLastWriteTime.dwLowDateTime=0x92bcba60, ftLastWriteTime.dwHighDateTime=0x1d5ded5, nFileSizeHigh=0x0, nFileSizeLow=0xe4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="khSfucv4zehuFjlWpnQP.png", cAlternateFileName="KHSFUC~1.PNG")) returned 1
	[0121.180] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.181] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0121.181] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="ntldr") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="pagefile.sys") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="ntdetect.com") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="autoexec.bat") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="desktop.ini") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="autorun.inf") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="ntuser.dat") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="iconcache.db") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="bootsect.bak") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="boot.ini") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="bootfont.bin") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="config.sys") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="io.sys") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="msdos.sys") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="ntuser.dat.log") returned 0x0
	[0121.181] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="thumbs.db") returned 0x0
	[0121.182] StrStrW (lpFirst="khsfucv4zehufjlwpnqp.png", lpSrch="swapfile.sys") returned 0x0
	[0121.182] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\khSfucv4zehuFjlWpnQP.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\khsfucv4zehufjlwpnqp.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x37c
	[0121.182] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=58528) returned 1
	[0121.182] CreateIoCompletionPort (FileHandle=0x37c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.182] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0121.253] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522d90
	[0121.253] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0121.253] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0121.254] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0121.254] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0121.254] ReadFile (in: hFile=0x37c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0121.255] GetLastError () returned 0x3e5
	[0121.255] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0121.255] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3313bb0, ftCreationTime.dwHighDateTime=0x1d5e7dd, ftLastAccessTime.dwLowDateTime=0x7753010, ftLastAccessTime.dwHighDateTime=0x1d5d7e9, ftLastWriteTime.dwLowDateTime=0x7753010, ftLastWriteTime.dwHighDateTime=0x1d5d7e9, nFileSizeHigh=0x0, nFileSizeLow=0x380f, dwReserved0=0x0, dwReserved1=0x0, cFileName="mzmLJF8YYxflwqk6.bmp", cAlternateFileName="MZMLJF~1.BMP")) returned 1
	[0121.255] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.255] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0121.255] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.255] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.255] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="ntldr") returned 0x0
	[0121.255] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="pagefile.sys") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="ntdetect.com") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="autoexec.bat") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="desktop.ini") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="autorun.inf") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="ntuser.dat") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="iconcache.db") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="bootsect.bak") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="boot.ini") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="bootfont.bin") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="config.sys") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="io.sys") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="msdos.sys") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="thumbs.db") returned 0x0
	[0121.256] StrStrW (lpFirst="mzmljf8yyxflwqk6.bmp", lpSrch="swapfile.sys") returned 0x0
	[0121.256] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\mzmLJF8YYxflwqk6.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\mzmljf8yyxflwqk6.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0121.257] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=14351) returned 1
	[0121.257] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.257] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0121.268] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522cd8
	[0121.268] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0121.268] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0121.269] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0121.269] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0121.269] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0121.270] GetLastError () returned 0x3e5
	[0121.270] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0121.270] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x150639e0, ftCreationTime.dwHighDateTime=0x1d5e61c, ftLastAccessTime.dwLowDateTime=0x5df6cda0, ftLastAccessTime.dwHighDateTime=0x1d5e652, ftLastWriteTime.dwLowDateTime=0x5df6cda0, ftLastWriteTime.dwHighDateTime=0x1d5e652, nFileSizeHigh=0x0, nFileSizeLow=0x9665, dwReserved0=0x0, dwReserved1=0x0, cFileName="PjRT4ImxVAs6z3Bij.jpg", cAlternateFileName="PJRT4I~1.JPG")) returned 1
	[0121.271] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.271] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0121.271] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="ntldr") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="pagefile.sys") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="ntdetect.com") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="autoexec.bat") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="desktop.ini") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="autorun.inf") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="ntuser.dat") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="iconcache.db") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="bootsect.bak") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="boot.ini") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="bootfont.bin") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="config.sys") returned 0x0
	[0121.271] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="io.sys") returned 0x0
	[0121.272] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="msdos.sys") returned 0x0
	[0121.272] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0121.272] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="thumbs.db") returned 0x0
	[0121.272] StrStrW (lpFirst="pjrt4imxvas6z3bij.jpg", lpSrch="swapfile.sys") returned 0x0
	[0121.272] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\PjRT4ImxVAs6z3Bij.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\pjrt4imxvas6z3bij.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0121.272] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=38501) returned 1
	[0121.272] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.272] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0121.285] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522e48
	[0121.285] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d7f0
	[0121.285] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0121.286] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0121.286] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0121.286] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0121.287] GetLastError () returned 0x3e5
	[0121.287] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0121.287] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48e11a60, ftCreationTime.dwHighDateTime=0x1d5e431, ftLastAccessTime.dwLowDateTime=0xac772010, ftLastAccessTime.dwHighDateTime=0x1d5e5e4, ftLastWriteTime.dwLowDateTime=0xac772010, ftLastWriteTime.dwHighDateTime=0x1d5e5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1574c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VerXtgx0Jo40vFcmY02.bmp", cAlternateFileName="VERXTG~1.BMP")) returned 1
	[0121.287] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.287] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0121.287] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.287] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="ntldr") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="pagefile.sys") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="ntdetect.com") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="autoexec.bat") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="desktop.ini") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="autorun.inf") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="ntuser.dat") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="iconcache.db") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="bootsect.bak") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="boot.ini") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="bootfont.bin") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="config.sys") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="io.sys") returned 0x0
	[0121.288] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="msdos.sys") returned 0x0
	[0121.289] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0121.289] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="thumbs.db") returned 0x0
	[0121.289] StrStrW (lpFirst="verxtgx0jo40vfcmy02.bmp", lpSrch="swapfile.sys") returned 0x0
	[0121.289] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\VerXtgx0Jo40vFcmY02.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\verxtgx0jo40vfcmy02.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0121.289] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=87884) returned 1
	[0121.289] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.289] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4ab0020
	[0121.301] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0121.301] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x671788
	[0121.302] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0121.302] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0121.302] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0121.302] ReadFile (in: hFile=0x3e0, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0121.303] GetLastError () returned 0x3e5
	[0121.303] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0121.303] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a67d6f0, ftCreationTime.dwHighDateTime=0x1d5e652, ftLastAccessTime.dwLowDateTime=0x290c1d40, ftLastAccessTime.dwHighDateTime=0x1d5e37b, ftLastWriteTime.dwLowDateTime=0x290c1d40, ftLastWriteTime.dwHighDateTime=0x1d5e37b, nFileSizeHigh=0x0, nFileSizeLow=0x2f6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wwtws9.bmp", cAlternateFileName="")) returned 1
	[0121.303] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.303] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0121.304] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="ntldr") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="pagefile.sys") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="ntdetect.com") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="autoexec.bat") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="desktop.ini") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="autorun.inf") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="ntuser.dat") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="iconcache.db") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="bootsect.bak") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="boot.ini") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="bootfont.bin") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="config.sys") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="io.sys") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="msdos.sys") returned 0x0
	[0121.304] StrStrW (lpFirst="wwtws9.bmp", lpSrch="ntuser.dat.log") returned 0x0
	[0121.305] StrStrW (lpFirst="wwtws9.bmp", lpSrch="thumbs.db") returned 0x0
	[0121.305] StrStrW (lpFirst="wwtws9.bmp", lpSrch="swapfile.sys") returned 0x0
	[0121.305] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\wwtws9.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\wwtws9.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0121.305] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=12143) returned 1
	[0121.305] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.305] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4bb0020
	[0121.319] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0121.319] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x671c98
	[0121.319] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0121.320] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0121.320] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0121.320] ReadFile (in: hFile=0x3c4, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 1
	[0121.321] GetLastError () returned 0x3e5
	[0121.321] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0121.321] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a67d6f0, ftCreationTime.dwHighDateTime=0x1d5e652, ftLastAccessTime.dwLowDateTime=0x290c1d40, ftLastAccessTime.dwHighDateTime=0x1d5e37b, ftLastWriteTime.dwLowDateTime=0x290c1d40, ftLastWriteTime.dwHighDateTime=0x1d5e37b, nFileSizeHigh=0x0, nFileSizeLow=0x2f6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wwtws9.bmp", cAlternateFileName="")) returned 0
	[0121.321] FindClose (in: hFindFile=0x61e950 | out: hFindFile=0x61e950) returned 1
	[0121.322] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0121.322] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.322] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040128
	[0121.322] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0121.322] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\DM-dwtZxr\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\dm-dwtzxr\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0121.322] WriteFile (in: hFile=0x3dc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e514, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e514*=0x512, lpOverlapped=0x0) returned 1
	[0121.323] CloseHandle (hObject=0x3dc) returned 1
	[0121.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040128 | out: hHeap=0x5f0000) returned 1
	[0121.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0121.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0121.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0121.324] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfee2660, ftCreationTime.dwHighDateTime=0x1d5da42, ftLastAccessTime.dwLowDateTime=0xfd9228e0, ftLastAccessTime.dwHighDateTime=0x1d5d9b5, ftLastWriteTime.dwLowDateTime=0xfd9228e0, ftLastWriteTime.dwHighDateTime=0x1d5d9b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UlQPh1RcR82WY", cAlternateFileName="ULQPH1~1")) returned 1
	[0121.324] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0121.324] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0121.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0121.324] lstrcmpW (lpString1="..", lpString2="UlQPh1RcR82WY") returned -1
	[0121.324] lstrcmpW (lpString1=".", lpString2="UlQPh1RcR82WY") returned -1
	[0121.324] StrStrW (lpFirst="ulqph1rcr82wy", lpSrch="programdata") returned 0x0
	[0121.324] StrStrW (lpFirst="ulqph1rcr82wy", lpSrch="$recycle.bin") returned 0x0
	[0121.324] StrStrW (lpFirst="ulqph1rcr82wy", lpSrch="program files") returned 0x0
	[0121.324] StrStrW (lpFirst="ulqph1rcr82wy", lpSrch="windows") returned 0x0
	[0121.324] StrStrW (lpFirst="ulqph1rcr82wy", lpSrch="all users") returned 0x0
	[0121.324] StrStrW (lpFirst="ulqph1rcr82wy", lpSrch="winnt") returned 0x0
	[0121.324] StrStrW (lpFirst="ulqph1rcr82wy", lpSrch="appdata") returned 0x0
	[0121.324] StrStrW (lpFirst="ulqph1rcr82wy", lpSrch="application data") returned 0x0
	[0121.324] StrStrW (lpFirst="ulqph1rcr82wy", lpSrch="local settings") returned 0x0
	[0121.325] StrStrW (lpFirst="ulqph1rcr82wy", lpSrch="boot") returned 0x0
	[0121.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0121.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0121.325] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\*", lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfee2660, ftCreationTime.dwHighDateTime=0x1d5da42, ftLastAccessTime.dwLowDateTime=0xfd9228e0, ftLastAccessTime.dwHighDateTime=0x1d5d9b5, ftLastWriteTime.dwLowDateTime=0xfd9228e0, ftLastWriteTime.dwHighDateTime=0x1d5d9b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e950
	[0121.325] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0121.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0121.325] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0121.325] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0121.325] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0121.325] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfee2660, ftCreationTime.dwHighDateTime=0x1d5da42, ftLastAccessTime.dwLowDateTime=0xfd9228e0, ftLastAccessTime.dwHighDateTime=0x1d5d9b5, ftLastWriteTime.dwLowDateTime=0xfd9228e0, ftLastWriteTime.dwHighDateTime=0x1d5d9b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0121.325] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0121.325] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0121.325] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8875e0b0, ftCreationTime.dwHighDateTime=0x1d5e3b5, ftLastAccessTime.dwLowDateTime=0xfb370c00, ftLastAccessTime.dwHighDateTime=0x1d5e072, ftLastWriteTime.dwLowDateTime=0xfb370c00, ftLastWriteTime.dwHighDateTime=0x1d5e072, nFileSizeHigh=0x0, nFileSizeLow=0x107f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="1gxQ0.jpg", cAlternateFileName="")) returned 1
	[0121.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0121.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0121.325] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0121.325] StrStrW (lpFirst="1gxq0.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="ntldr") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="pagefile.sys") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="ntdetect.com") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="autoexec.bat") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="desktop.ini") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="autorun.inf") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="ntuser.dat") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="iconcache.db") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="bootsect.bak") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="boot.ini") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="bootfont.bin") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="config.sys") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="io.sys") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="msdos.sys") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0121.326] StrStrW (lpFirst="1gxq0.jpg", lpSrch="thumbs.db") returned 0x0
	[0121.327] StrStrW (lpFirst="1gxq0.jpg", lpSrch="swapfile.sys") returned 0x0
	[0121.327] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\1gxQ0.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\1gxq0.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x378
	[0121.327] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=67570) returned 1
	[0121.327] CreateIoCompletionPort (FileHandle=0x378, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.327] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4cb0020
	[0121.348] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0121.348] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x6721a8
	[0121.348] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633220) returned 1
	[0121.349] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0121.349] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0121.349] ReadFile (in: hFile=0x378, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0121.350] GetLastError () returned 0x3e5
	[0121.350] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0121.350] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af3fbb0, ftCreationTime.dwHighDateTime=0x1d5ddf2, ftLastAccessTime.dwLowDateTime=0x9604a220, ftLastAccessTime.dwHighDateTime=0x1d5e617, ftLastWriteTime.dwLowDateTime=0x9604a220, ftLastWriteTime.dwHighDateTime=0x1d5e617, nFileSizeHigh=0x0, nFileSizeLow=0x1038d, dwReserved0=0x0, dwReserved1=0x0, cFileName="3lfth77S0R Wpm6GyTL.gif", cAlternateFileName="3LFTH7~1.GIF")) returned 1
	[0121.350] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0121.350] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0121.350] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0121.350] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.351] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="ntldr") returned 0x0
	[0121.351] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="pagefile.sys") returned 0x0
	[0121.351] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="ntdetect.com") returned 0x0
	[0121.351] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="autoexec.bat") returned 0x0
	[0121.351] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="desktop.ini") returned 0x0
	[0121.351] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="autorun.inf") returned 0x0
	[0121.351] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="ntuser.dat") returned 0x0
	[0121.351] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="iconcache.db") returned 0x0
	[0121.352] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="bootsect.bak") returned 0x0
	[0121.352] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="boot.ini") returned 0x0
	[0121.352] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="bootfont.bin") returned 0x0
	[0121.352] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="config.sys") returned 0x0
	[0121.352] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="io.sys") returned 0x0
	[0121.352] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="msdos.sys") returned 0x0
	[0121.352] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0121.352] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="thumbs.db") returned 0x0
	[0121.353] StrStrW (lpFirst="3lfth77s0r wpm6gytl.gif", lpSrch="swapfile.sys") returned 0x0
	[0121.353] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\3lfth77S0R Wpm6GyTL.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\3lfth77s0r wpm6gytl.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3f8
	[0121.353] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=66445) returned 1
	[0121.353] CreateIoCompletionPort (FileHandle=0x3f8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.353] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4db0020
	[0121.612] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0121.612] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0121.612] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633220) returned 1
	[0121.613] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0121.613] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0121.613] ReadFile (in: hFile=0x3f8, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 0
	[0121.649] GetLastError () returned 0x3e5
	[0121.649] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0121.649] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4751ccf0, ftCreationTime.dwHighDateTime=0x1d5e754, ftLastAccessTime.dwLowDateTime=0x4095a740, ftLastAccessTime.dwHighDateTime=0x1d5e1d9, ftLastWriteTime.dwLowDateTime=0x4095a740, ftLastWriteTime.dwHighDateTime=0x1d5e1d9, nFileSizeHigh=0x0, nFileSizeLow=0xb281, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwvO_oL5wG9f.png", cAlternateFileName="DWVO_O~1.PNG")) returned 1
	[0121.649] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0121.649] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0121.649] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0121.649] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.649] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="ntldr") returned 0x0
	[0121.649] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="pagefile.sys") returned 0x0
	[0121.649] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="ntdetect.com") returned 0x0
	[0121.649] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="autoexec.bat") returned 0x0
	[0121.649] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="desktop.ini") returned 0x0
	[0121.649] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="autorun.inf") returned 0x0
	[0121.650] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="ntuser.dat") returned 0x0
	[0121.650] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="iconcache.db") returned 0x0
	[0121.650] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="bootsect.bak") returned 0x0
	[0121.650] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="boot.ini") returned 0x0
	[0121.650] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="bootfont.bin") returned 0x0
	[0121.650] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="config.sys") returned 0x0
	[0121.650] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="io.sys") returned 0x0
	[0121.650] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="msdos.sys") returned 0x0
	[0121.650] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="ntuser.dat.log") returned 0x0
	[0121.650] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="thumbs.db") returned 0x0
	[0121.650] StrStrW (lpFirst="dwvo_ol5wg9f.png", lpSrch="swapfile.sys") returned 0x0
	[0121.650] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\dwvO_oL5wG9f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\dwvo_ol5wg9f.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3f8
	[0121.650] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=45697) returned 1
	[0121.650] CreateIoCompletionPort (FileHandle=0x3f8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.650] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0121.663] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0121.663] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0121.663] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633220) returned 1
	[0121.664] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0121.664] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0121.664] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0121.671] GetLastError () returned 0x3e5
	[0121.671] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0121.671] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ff32c0, ftCreationTime.dwHighDateTime=0x1d5da94, ftLastAccessTime.dwLowDateTime=0x32ba0330, ftLastAccessTime.dwHighDateTime=0x1d5e339, ftLastWriteTime.dwLowDateTime=0x32ba0330, ftLastWriteTime.dwHighDateTime=0x1d5e339, nFileSizeHigh=0x0, nFileSizeLow=0x9508, dwReserved0=0x0, dwReserved1=0x0, cFileName="uodH_fySlW2.png", cAlternateFileName="UODH_F~1.PNG")) returned 1
	[0121.671] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0121.671] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0121.671] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0121.671] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.671] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="ntldr") returned 0x0
	[0121.671] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="pagefile.sys") returned 0x0
	[0121.671] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="ntdetect.com") returned 0x0
	[0121.671] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="autoexec.bat") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="desktop.ini") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="autorun.inf") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="ntuser.dat") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="iconcache.db") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="bootsect.bak") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="boot.ini") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="bootfont.bin") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="config.sys") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="io.sys") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="msdos.sys") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="ntuser.dat.log") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="thumbs.db") returned 0x0
	[0121.672] StrStrW (lpFirst="uodh_fyslw2.png", lpSrch="swapfile.sys") returned 0x0
	[0121.672] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\uodH_fySlW2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\uodh_fyslw2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3f8
	[0121.672] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=38152) returned 1
	[0121.672] CreateIoCompletionPort (FileHandle=0x3f8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.672] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0121.684] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0121.684] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0121.684] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633220) returned 1
	[0121.685] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0121.685] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0121.685] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0121.686] GetLastError () returned 0x3e5
	[0121.686] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0121.686] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ff32c0, ftCreationTime.dwHighDateTime=0x1d5da94, ftLastAccessTime.dwLowDateTime=0x32ba0330, ftLastAccessTime.dwHighDateTime=0x1d5e339, ftLastWriteTime.dwLowDateTime=0x32ba0330, ftLastWriteTime.dwHighDateTime=0x1d5e339, nFileSizeHigh=0x0, nFileSizeLow=0x9508, dwReserved0=0x0, dwReserved1=0x0, cFileName="uodh_fyslw2.png", cAlternateFileName="UODH_F~1.PNG")) returned 0
	[0121.687] FindClose (in: hFindFile=0x61e950 | out: hFindFile=0x61e950) returned 1
	[0121.687] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0121.687] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0121.687] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x40819f8
	[0121.687] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0121.687] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\UlQPh1RcR82WY\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\ulqph1rcr82wy\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0121.688] WriteFile (in: hFile=0x3dc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e514, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e514*=0x512, lpOverlapped=0x0) returned 1
	[0121.689] CloseHandle (hObject=0x3dc) returned 1
	[0121.689] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0121.689] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0121.689] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a060 | out: hHeap=0x5f0000) returned 1
	[0121.690] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0121.690] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a4ae70, ftCreationTime.dwHighDateTime=0x1d5e668, ftLastAccessTime.dwLowDateTime=0x26f03c0, ftLastAccessTime.dwHighDateTime=0x1d5de1f, ftLastWriteTime.dwLowDateTime=0x26f03c0, ftLastWriteTime.dwHighDateTime=0x1d5de1f, nFileSizeHigh=0x0, nFileSizeLow=0x16774, dwReserved0=0x0, dwReserved1=0x0, cFileName="WrYL.gif", cAlternateFileName="")) returned 1
	[0121.690] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0121.690] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0121.690] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="ntldr") returned 0x0
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="pagefile.sys") returned 0x0
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="ntdetect.com") returned 0x0
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="autoexec.bat") returned 0x0
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="desktop.ini") returned 0x0
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="autorun.inf") returned 0x0
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="ntuser.dat") returned 0x0
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="iconcache.db") returned 0x0
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="bootsect.bak") returned 0x0
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="boot.ini") returned 0x0
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="bootfont.bin") returned 0x0
	[0121.690] StrStrW (lpFirst="wryl.gif", lpSrch="config.sys") returned 0x0
	[0121.691] StrStrW (lpFirst="wryl.gif", lpSrch="io.sys") returned 0x0
	[0121.691] StrStrW (lpFirst="wryl.gif", lpSrch="msdos.sys") returned 0x0
	[0121.691] StrStrW (lpFirst="wryl.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0121.691] StrStrW (lpFirst="wryl.gif", lpSrch="thumbs.db") returned 0x0
	[0121.691] StrStrW (lpFirst="wryl.gif", lpSrch="swapfile.sys") returned 0x0
	[0121.691] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\WrYL.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\wryl.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0121.691] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=92020) returned 1
	[0121.691] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.691] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0121.702] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0121.702] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0121.702] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0121.703] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0121.703] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0121.703] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0121.711] GetLastError () returned 0x3e5
	[0121.711] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0121.711] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a4ae70, ftCreationTime.dwHighDateTime=0x1d5e668, ftLastAccessTime.dwLowDateTime=0x26f03c0, ftLastAccessTime.dwHighDateTime=0x1d5de1f, ftLastWriteTime.dwLowDateTime=0x26f03c0, ftLastWriteTime.dwHighDateTime=0x1d5de1f, nFileSizeHigh=0x0, nFileSizeLow=0x16774, dwReserved0=0x0, dwReserved1=0x0, cFileName="wryl.gif", cAlternateFileName="")) returned 0
	[0121.711] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0121.711] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0121.711] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0121.711] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0121.711] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0121.711] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uGTa3LCJnT\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ugta3lcjnt\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0121.712] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0121.713] CloseHandle (hObject=0x3d8) returned 1
	[0121.713] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0121.713] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0121.713] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0121.713] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0121.713] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79550f00, ftCreationTime.dwHighDateTime=0x1d5d97b, ftLastAccessTime.dwLowDateTime=0xe625efe0, ftLastAccessTime.dwHighDateTime=0x1d5e4e4, ftLastWriteTime.dwLowDateTime=0xe625efe0, ftLastWriteTime.dwHighDateTime=0x1d5e4e4, nFileSizeHigh=0x0, nFileSizeLow=0x15d0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZrKgJJD.gif", cAlternateFileName="")) returned 1
	[0121.713] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0121.714] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0121.714] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="ntldr") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="pagefile.sys") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="ntdetect.com") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="autoexec.bat") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="desktop.ini") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="autorun.inf") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="ntuser.dat") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="iconcache.db") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="bootsect.bak") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="boot.ini") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="bootfont.bin") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="config.sys") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="io.sys") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="msdos.sys") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="thumbs.db") returned 0x0
	[0121.714] StrStrW (lpFirst="zrkgjjd.gif", lpSrch="swapfile.sys") returned 0x0
	[0121.714] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ZrKgJJD.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zrkgjjd.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0121.715] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=89354) returned 1
	[0121.715] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.715] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0121.725] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0121.726] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0121.726] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0121.726] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0121.727] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0121.727] ReadFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0121.735] GetLastError () returned 0x3e5
	[0121.735] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0121.735] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a31c70, ftCreationTime.dwHighDateTime=0x1d5d8ab, ftLastAccessTime.dwLowDateTime=0xa3c5450, ftLastAccessTime.dwHighDateTime=0x1d5de55, ftLastWriteTime.dwLowDateTime=0xa3c5450, ftLastWriteTime.dwHighDateTime=0x1d5de55, nFileSizeHigh=0x0, nFileSizeLow=0x1e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Xsp.gif", cAlternateFileName="")) returned 1
	[0121.735] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0121.735] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0121.735] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="ntldr") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="pagefile.sys") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="ntdetect.com") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="autoexec.bat") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="desktop.ini") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="autorun.inf") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="ntuser.dat") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="iconcache.db") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="bootsect.bak") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="boot.ini") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="bootfont.bin") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="config.sys") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="io.sys") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="msdos.sys") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="ntuser.dat.log") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="thumbs.db") returned 0x0
	[0121.735] StrStrW (lpFirst="_xsp.gif", lpSrch="swapfile.sys") returned 0x0
	[0121.735] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\_Xsp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\_xsp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0121.736] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=7818) returned 1
	[0121.736] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.736] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0121.746] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0121.746] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0121.746] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0121.747] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0121.747] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0121.747] ReadFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0121.757] GetLastError () returned 0x3e5
	[0121.757] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0121.757] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a31c70, ftCreationTime.dwHighDateTime=0x1d5d8ab, ftLastAccessTime.dwLowDateTime=0xa3c5450, ftLastAccessTime.dwHighDateTime=0x1d5de55, ftLastWriteTime.dwLowDateTime=0xa3c5450, ftLastWriteTime.dwHighDateTime=0x1d5de55, nFileSizeHigh=0x0, nFileSizeLow=0x1e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_xsp.gif", cAlternateFileName="")) returned 0
	[0121.757] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0121.757] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0121.757] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0121.757] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0121.757] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0121.757] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0121.758] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0121.759] CloseHandle (hObject=0x3bc) returned 1
	[0121.759] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0121.759] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0121.760] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0121.760] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0121.760] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0121.760] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0121.760] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0121.760] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0121.760] lstrcmpW (lpString1="..", lpString2="PrintHood") returned -1
	[0121.760] lstrcmpW (lpString1=".", lpString2="PrintHood") returned -1
	[0121.760] StrStrW (lpFirst="printhood", lpSrch="programdata") returned 0x0
	[0121.760] StrStrW (lpFirst="printhood", lpSrch="$recycle.bin") returned 0x0
	[0121.760] StrStrW (lpFirst="printhood", lpSrch="program files") returned 0x0
	[0121.760] StrStrW (lpFirst="printhood", lpSrch="windows") returned 0x0
	[0121.760] StrStrW (lpFirst="printhood", lpSrch="all users") returned 0x0
	[0121.760] StrStrW (lpFirst="printhood", lpSrch="winnt") returned 0x0
	[0121.760] StrStrW (lpFirst="printhood", lpSrch="appdata") returned 0x0
	[0121.760] StrStrW (lpFirst="printhood", lpSrch="application data") returned 0x0
	[0121.760] StrStrW (lpFirst="printhood", lpSrch="local settings") returned 0x0
	[0121.760] StrStrW (lpFirst="printhood", lpSrch="boot") returned 0x0
	[0121.760] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0121.760] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0121.760] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a31c70, ftCreationTime.dwHighDateTime=0x1d5d8ab, ftLastAccessTime.dwLowDateTime=0xa3c5450, ftLastAccessTime.dwHighDateTime=0x1d5de55, ftLastWriteTime.dwLowDateTime=0xa3c5450, ftLastWriteTime.dwHighDateTime=0x1d5de55, nFileSizeHigh=0x0, nFileSizeLow=0x1e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_xsp.gif", cAlternateFileName="占c勸cR")) returned 0xffffffff
	[0121.761] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0121.761] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0121.761] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0121.761] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0121.761] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0121.761] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0121.761] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0121.761] lstrcmpW (lpString1="..", lpString2="Recent") returned -1
	[0121.761] lstrcmpW (lpString1=".", lpString2="Recent") returned -1
	[0121.761] StrStrW (lpFirst="recent", lpSrch="programdata") returned 0x0
	[0121.761] StrStrW (lpFirst="recent", lpSrch="$recycle.bin") returned 0x0
	[0121.761] StrStrW (lpFirst="recent", lpSrch="program files") returned 0x0
	[0121.761] StrStrW (lpFirst="recent", lpSrch="windows") returned 0x0
	[0121.761] StrStrW (lpFirst="recent", lpSrch="all users") returned 0x0
	[0121.761] StrStrW (lpFirst="recent", lpSrch="winnt") returned 0x0
	[0121.761] StrStrW (lpFirst="recent", lpSrch="appdata") returned 0x0
	[0121.761] StrStrW (lpFirst="recent", lpSrch="application data") returned 0x0
	[0121.762] StrStrW (lpFirst="recent", lpSrch="local settings") returned 0x0
	[0121.762] StrStrW (lpFirst="recent", lpSrch="boot") returned 0x0
	[0121.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0121.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0121.762] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10a31c70, ftCreationTime.dwHighDateTime=0x1d5d8ab, ftLastAccessTime.dwLowDateTime=0xa3c5450, ftLastAccessTime.dwHighDateTime=0x1d5de55, ftLastWriteTime.dwLowDateTime=0xa3c5450, ftLastWriteTime.dwHighDateTime=0x1d5de55, nFileSizeHigh=0x0, nFileSizeLow=0x1e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_xsp.gif", cAlternateFileName="䮸d勸cL")) returned 0xffffffff
	[0121.762] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0121.762] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0121.762] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0121.762] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0121.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0121.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0121.762] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0121.762] lstrcmpW (lpString1="..", lpString2="Saved Games") returned -1
	[0121.762] lstrcmpW (lpString1=".", lpString2="Saved Games") returned -1
	[0121.762] StrStrW (lpFirst="saved games", lpSrch="programdata") returned 0x0
	[0121.762] StrStrW (lpFirst="saved games", lpSrch="$recycle.bin") returned 0x0
	[0121.762] StrStrW (lpFirst="saved games", lpSrch="program files") returned 0x0
	[0121.762] StrStrW (lpFirst="saved games", lpSrch="windows") returned 0x0
	[0121.762] StrStrW (lpFirst="saved games", lpSrch="all users") returned 0x0
	[0121.762] StrStrW (lpFirst="saved games", lpSrch="winnt") returned 0x0
	[0121.762] StrStrW (lpFirst="saved games", lpSrch="appdata") returned 0x0
	[0121.762] StrStrW (lpFirst="saved games", lpSrch="application data") returned 0x0
	[0121.763] StrStrW (lpFirst="saved games", lpSrch="local settings") returned 0x0
	[0121.763] StrStrW (lpFirst="saved games", lpSrch="boot") returned 0x0
	[0121.763] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0121.763] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0121.763] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0121.763] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0121.763] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0121.763] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0121.763] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0121.763] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0121.763] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.763] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0121.763] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0121.763] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0121.764] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0121.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0121.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0121.764] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0121.764] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.764] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0121.764] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0121.764] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0121.764] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0121.764] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0121.764] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0121.764] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0121.764] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0121.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0121.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0121.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0121.764] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0121.764] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0121.765] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0121.766] CloseHandle (hObject=0x3bc) returned 1
	[0121.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0121.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0121.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0121.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0121.767] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0121.767] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0121.767] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0121.767] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0121.767] lstrcmpW (lpString1="..", lpString2="Searches") returned -1
	[0121.767] lstrcmpW (lpString1=".", lpString2="Searches") returned -1
	[0121.767] StrStrW (lpFirst="searches", lpSrch="programdata") returned 0x0
	[0121.767] StrStrW (lpFirst="searches", lpSrch="$recycle.bin") returned 0x0
	[0121.767] StrStrW (lpFirst="searches", lpSrch="program files") returned 0x0
	[0121.767] StrStrW (lpFirst="searches", lpSrch="windows") returned 0x0
	[0121.767] StrStrW (lpFirst="searches", lpSrch="all users") returned 0x0
	[0121.767] StrStrW (lpFirst="searches", lpSrch="winnt") returned 0x0
	[0121.767] StrStrW (lpFirst="searches", lpSrch="appdata") returned 0x0
	[0121.767] StrStrW (lpFirst="searches", lpSrch="application data") returned 0x0
	[0121.767] StrStrW (lpFirst="searches", lpSrch="local settings") returned 0x0
	[0121.767] StrStrW (lpFirst="searches", lpSrch="boot") returned 0x0
	[0121.767] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0121.767] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0121.768] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0121.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0121.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0121.768] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0121.768] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0121.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0121.768] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0121.768] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0121.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0121.768] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0121.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0121.768] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0121.768] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0121.768] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.768] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0121.769] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0121.769] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0121.769] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0121.769] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0121.769] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0121.769] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0121.769] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0121.769] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0121.769] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0121.769] StrStrW (lpFirst="everywhere.search-ms", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0121.769] StrStrW (lpFirst="everywhere.search-ms", lpSrch="ntldr") returned 0x0
	[0121.769] StrStrW (lpFirst="everywhere.search-ms", lpSrch="pagefile.sys") returned 0x0
	[0121.769] StrStrW (lpFirst="everywhere.search-ms", lpSrch="ntdetect.com") returned 0x0
	[0121.769] StrStrW (lpFirst="everywhere.search-ms", lpSrch="autoexec.bat") returned 0x0
	[0121.769] StrStrW (lpFirst="everywhere.search-ms", lpSrch="desktop.ini") returned 0x0
	[0121.769] StrStrW (lpFirst="everywhere.search-ms", lpSrch="autorun.inf") returned 0x0
	[0121.769] StrStrW (lpFirst="everywhere.search-ms", lpSrch="ntuser.dat") returned 0x0
	[0121.769] StrStrW (lpFirst="everywhere.search-ms", lpSrch="iconcache.db") returned 0x0
	[0121.769] StrStrW (lpFirst="everywhere.search-ms", lpSrch="bootsect.bak") returned 0x0
	[0121.769] StrStrW (lpFirst="everywhere.search-ms", lpSrch="boot.ini") returned 0x0
	[0121.770] StrStrW (lpFirst="everywhere.search-ms", lpSrch="bootfont.bin") returned 0x0
	[0121.770] StrStrW (lpFirst="everywhere.search-ms", lpSrch="config.sys") returned 0x0
	[0121.770] StrStrW (lpFirst="everywhere.search-ms", lpSrch="io.sys") returned 0x0
	[0121.770] StrStrW (lpFirst="everywhere.search-ms", lpSrch="msdos.sys") returned 0x0
	[0121.770] StrStrW (lpFirst="everywhere.search-ms", lpSrch="ntuser.dat.log") returned 0x0
	[0121.770] StrStrW (lpFirst="everywhere.search-ms", lpSrch="thumbs.db") returned 0x0
	[0121.770] StrStrW (lpFirst="everywhere.search-ms", lpSrch="swapfile.sys") returned 0x0
	[0121.770] SetFileAttributesW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms", dwFileAttributes=0x22) returned 1
	[0121.771] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0121.771] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=248) returned 1
	[0121.771] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0121.771] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0121.882] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0121.882] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0121.882] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0122.010] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0122.010] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0122.010] ReadFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0122.011] GetLastError () returned 0x3e5
	[0122.011] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0122.011] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
	[0122.011] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0122.011] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0122.012] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0122.012] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.012] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="ntldr") returned 0x0
	[0122.012] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="pagefile.sys") returned 0x0
	[0122.012] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="ntdetect.com") returned 0x0
	[0122.012] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="autoexec.bat") returned 0x0
	[0122.012] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="desktop.ini") returned 0x0
	[0122.012] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="autorun.inf") returned 0x0
	[0122.012] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="ntuser.dat") returned 0x0
	[0122.012] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="iconcache.db") returned 0x0
	[0122.013] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="bootsect.bak") returned 0x0
	[0122.013] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="boot.ini") returned 0x0
	[0122.013] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="bootfont.bin") returned 0x0
	[0122.013] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="config.sys") returned 0x0
	[0122.013] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="io.sys") returned 0x0
	[0122.013] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="msdos.sys") returned 0x0
	[0122.013] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="ntuser.dat.log") returned 0x0
	[0122.013] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="thumbs.db") returned 0x0
	[0122.013] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="swapfile.sys") returned 0x0
	[0122.013] SetFileAttributesW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x22) returned 1
	[0122.050] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0122.050] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=248) returned 1
	[0122.050] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.050] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0122.064] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0122.064] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0122.064] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0122.065] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0122.065] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0122.065] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0122.073] GetLastError () returned 0x3e5
	[0122.073] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0122.073] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexed locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0
	[0122.073] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0122.073] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0122.074] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0122.074] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0122.074] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0122.074] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0122.074] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0122.075] CloseHandle (hObject=0x3bc) returned 1
	[0122.076] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0122.076] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0122.076] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0122.076] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0122.076] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0122.076] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0122.076] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0122.076] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0122.076] lstrcmpW (lpString1="..", lpString2="SendTo") returned -1
	[0122.076] lstrcmpW (lpString1=".", lpString2="SendTo") returned -1
	[0122.076] StrStrW (lpFirst="sendto", lpSrch="programdata") returned 0x0
	[0122.076] StrStrW (lpFirst="sendto", lpSrch="$recycle.bin") returned 0x0
	[0122.076] StrStrW (lpFirst="sendto", lpSrch="program files") returned 0x0
	[0122.076] StrStrW (lpFirst="sendto", lpSrch="windows") returned 0x0
	[0122.076] StrStrW (lpFirst="sendto", lpSrch="all users") returned 0x0
	[0122.076] StrStrW (lpFirst="sendto", lpSrch="winnt") returned 0x0
	[0122.076] StrStrW (lpFirst="sendto", lpSrch="appdata") returned 0x0
	[0122.076] StrStrW (lpFirst="sendto", lpSrch="application data") returned 0x0
	[0122.076] StrStrW (lpFirst="sendto", lpSrch="local settings") returned 0x0
	[0122.076] StrStrW (lpFirst="sendto", lpSrch="boot") returned 0x0
	[0122.076] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0122.077] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0122.077] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexed locations.search-ms", cAlternateFileName="䮸d勸cL")) returned 0xffffffff
	[0122.077] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0122.077] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0122.077] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0122.077] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0122.077] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0122.077] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0122.077] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0122.077] lstrcmpW (lpString1="..", lpString2="Start Menu") returned -1
	[0122.077] lstrcmpW (lpString1=".", lpString2="Start Menu") returned -1
	[0122.077] StrStrW (lpFirst="start menu", lpSrch="programdata") returned 0x0
	[0122.077] StrStrW (lpFirst="start menu", lpSrch="$recycle.bin") returned 0x0
	[0122.077] StrStrW (lpFirst="start menu", lpSrch="program files") returned 0x0
	[0122.078] StrStrW (lpFirst="start menu", lpSrch="windows") returned 0x0
	[0122.078] StrStrW (lpFirst="start menu", lpSrch="all users") returned 0x0
	[0122.078] StrStrW (lpFirst="start menu", lpSrch="winnt") returned 0x0
	[0122.078] StrStrW (lpFirst="start menu", lpSrch="appdata") returned 0x0
	[0122.078] StrStrW (lpFirst="start menu", lpSrch="application data") returned 0x0
	[0122.078] StrStrW (lpFirst="start menu", lpSrch="local settings") returned 0x0
	[0122.078] StrStrW (lpFirst="start menu", lpSrch="boot") returned 0x0
	[0122.078] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0122.078] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0122.078] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexed locations.search-ms", cAlternateFileName="占c勸cT")) returned 0xffffffff
	[0122.078] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0122.078] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0122.078] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0122.078] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0122.078] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0122.078] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0122.078] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0122.078] lstrcmpW (lpString1="..", lpString2="Templates") returned -1
	[0122.078] lstrcmpW (lpString1=".", lpString2="Templates") returned -1
	[0122.079] StrStrW (lpFirst="templates", lpSrch="programdata") returned 0x0
	[0122.079] StrStrW (lpFirst="templates", lpSrch="$recycle.bin") returned 0x0
	[0122.079] StrStrW (lpFirst="templates", lpSrch="program files") returned 0x0
	[0122.079] StrStrW (lpFirst="templates", lpSrch="windows") returned 0x0
	[0122.079] StrStrW (lpFirst="templates", lpSrch="all users") returned 0x0
	[0122.079] StrStrW (lpFirst="templates", lpSrch="winnt") returned 0x0
	[0122.079] StrStrW (lpFirst="templates", lpSrch="appdata") returned 0x0
	[0122.079] StrStrW (lpFirst="templates", lpSrch="application data") returned 0x0
	[0122.079] StrStrW (lpFirst="templates", lpSrch="local settings") returned 0x0
	[0122.079] StrStrW (lpFirst="templates", lpSrch="boot") returned 0x0
	[0122.079] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0122.079] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0122.079] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexed locations.search-ms", cAlternateFileName="占c勸cR")) returned 0xffffffff
	[0122.079] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0122.079] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0122.079] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0122.079] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc3faa40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc3faa40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0122.079] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0122.079] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0122.080] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0122.080] lstrcmpW (lpString1="..", lpString2="Videos") returned -1
	[0122.080] lstrcmpW (lpString1=".", lpString2="Videos") returned -1
	[0122.080] StrStrW (lpFirst="videos", lpSrch="programdata") returned 0x0
	[0122.080] StrStrW (lpFirst="videos", lpSrch="$recycle.bin") returned 0x0
	[0122.080] StrStrW (lpFirst="videos", lpSrch="program files") returned 0x0
	[0122.080] StrStrW (lpFirst="videos", lpSrch="windows") returned 0x0
	[0122.080] StrStrW (lpFirst="videos", lpSrch="all users") returned 0x0
	[0122.080] StrStrW (lpFirst="videos", lpSrch="winnt") returned 0x0
	[0122.080] StrStrW (lpFirst="videos", lpSrch="appdata") returned 0x0
	[0122.080] StrStrW (lpFirst="videos", lpSrch="application data") returned 0x0
	[0122.080] StrStrW (lpFirst="videos", lpSrch="local settings") returned 0x0
	[0122.080] StrStrW (lpFirst="videos", lpSrch="boot") returned 0x0
	[0122.080] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0122.080] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0122.080] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc3faa40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc3faa40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0122.081] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0122.081] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0122.081] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0122.081] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0122.081] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0122.081] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc3faa40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc3faa40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.081] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0122.081] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0122.081] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0122.081] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0122.081] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0122.081] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98f26e60, ftCreationTime.dwHighDateTime=0x1d5d891, ftLastAccessTime.dwLowDateTime=0xbb112bb0, ftLastAccessTime.dwHighDateTime=0x1d5dded, ftLastWriteTime.dwLowDateTime=0xbb112bb0, ftLastWriteTime.dwHighDateTime=0x1d5dded, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3Sh28JSd", cAlternateFileName="")) returned 1
	[0122.081] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644d18
	[0122.081] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0122.081] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644d18 | out: hHeap=0x5f0000) returned 1
	[0122.081] lstrcmpW (lpString1="..", lpString2="3Sh28JSd") returned -1
	[0122.081] lstrcmpW (lpString1=".", lpString2="3Sh28JSd") returned -1
	[0122.081] StrStrW (lpFirst="3sh28jsd", lpSrch="programdata") returned 0x0
	[0122.081] StrStrW (lpFirst="3sh28jsd", lpSrch="$recycle.bin") returned 0x0
	[0122.081] StrStrW (lpFirst="3sh28jsd", lpSrch="program files") returned 0x0
	[0122.082] StrStrW (lpFirst="3sh28jsd", lpSrch="windows") returned 0x0
	[0122.082] StrStrW (lpFirst="3sh28jsd", lpSrch="all users") returned 0x0
	[0122.082] StrStrW (lpFirst="3sh28jsd", lpSrch="winnt") returned 0x0
	[0122.082] StrStrW (lpFirst="3sh28jsd", lpSrch="appdata") returned 0x0
	[0122.082] StrStrW (lpFirst="3sh28jsd", lpSrch="application data") returned 0x0
	[0122.082] StrStrW (lpFirst="3sh28jsd", lpSrch="local settings") returned 0x0
	[0122.082] StrStrW (lpFirst="3sh28jsd", lpSrch="boot") returned 0x0
	[0122.082] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0122.082] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0122.082] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98f26e60, ftCreationTime.dwHighDateTime=0x1d5d891, ftLastAccessTime.dwLowDateTime=0xbb112bb0, ftLastAccessTime.dwHighDateTime=0x1d5dded, ftLastWriteTime.dwLowDateTime=0xbb112bb0, ftLastWriteTime.dwHighDateTime=0x1d5dded, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0122.082] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0122.082] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0122.082] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0122.082] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0122.082] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0122.082] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0122.082] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0122.083] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98f26e60, ftCreationTime.dwHighDateTime=0x1d5d891, ftLastAccessTime.dwLowDateTime=0xbb112bb0, ftLastAccessTime.dwHighDateTime=0x1d5dded, ftLastWriteTime.dwLowDateTime=0xbb112bb0, ftLastWriteTime.dwHighDateTime=0x1d5dded, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.083] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0122.083] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0122.083] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0122.083] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0122.083] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0122.083] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6bbdbf0, ftCreationTime.dwHighDateTime=0x1d5dd71, ftLastAccessTime.dwLowDateTime=0x1b3eb120, ftLastAccessTime.dwHighDateTime=0x1d5e095, ftLastWriteTime.dwLowDateTime=0x1b3eb120, ftLastWriteTime.dwHighDateTime=0x1d5e095, nFileSizeHigh=0x0, nFileSizeLow=0x9a7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="9G71itxwqF7N-a3T.mp4", cAlternateFileName="9G71IT~1.MP4")) returned 1
	[0122.083] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0122.083] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0122.083] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0122.083] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.083] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="ntldr") returned 0x0
	[0122.083] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="pagefile.sys") returned 0x0
	[0122.083] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="ntdetect.com") returned 0x0
	[0122.083] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="autoexec.bat") returned 0x0
	[0122.083] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="desktop.ini") returned 0x0
	[0122.083] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="autorun.inf") returned 0x0
	[0122.083] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="ntuser.dat") returned 0x0
	[0122.083] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="iconcache.db") returned 0x0
	[0122.083] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="bootsect.bak") returned 0x0
	[0122.083] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="boot.ini") returned 0x0
	[0122.084] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="bootfont.bin") returned 0x0
	[0122.084] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="config.sys") returned 0x0
	[0122.084] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="io.sys") returned 0x0
	[0122.084] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="msdos.sys") returned 0x0
	[0122.084] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0122.084] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="thumbs.db") returned 0x0
	[0122.084] StrStrW (lpFirst="9g71itxwqf7n-a3t.mp4", lpSrch="swapfile.sys") returned 0x0
	[0122.084] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\9G71itxwqF7N-a3T.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\9g71itxwqf7n-a3t.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0122.084] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=39551) returned 1
	[0122.084] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.084] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0122.097] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0122.098] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0122.098] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0122.099] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0122.099] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0122.099] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0122.107] GetLastError () returned 0x3e5
	[0122.107] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0122.107] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2393490, ftCreationTime.dwHighDateTime=0x1d5debe, ftLastAccessTime.dwLowDateTime=0xcfc69410, ftLastAccessTime.dwHighDateTime=0x1d5e30f, ftLastWriteTime.dwLowDateTime=0xcfc69410, ftLastWriteTime.dwHighDateTime=0x1d5e30f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EJ0UHp", cAlternateFileName="")) returned 1
	[0122.107] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0122.107] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0122.107] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0122.107] lstrcmpW (lpString1="..", lpString2="EJ0UHp") returned -1
	[0122.107] lstrcmpW (lpString1=".", lpString2="EJ0UHp") returned -1
	[0122.107] StrStrW (lpFirst="ej0uhp", lpSrch="programdata") returned 0x0
	[0122.107] StrStrW (lpFirst="ej0uhp", lpSrch="$recycle.bin") returned 0x0
	[0122.107] StrStrW (lpFirst="ej0uhp", lpSrch="program files") returned 0x0
	[0122.107] StrStrW (lpFirst="ej0uhp", lpSrch="windows") returned 0x0
	[0122.107] StrStrW (lpFirst="ej0uhp", lpSrch="all users") returned 0x0
	[0122.107] StrStrW (lpFirst="ej0uhp", lpSrch="winnt") returned 0x0
	[0122.107] StrStrW (lpFirst="ej0uhp", lpSrch="appdata") returned 0x0
	[0122.107] StrStrW (lpFirst="ej0uhp", lpSrch="application data") returned 0x0
	[0122.108] StrStrW (lpFirst="ej0uhp", lpSrch="local settings") returned 0x0
	[0122.108] StrStrW (lpFirst="ej0uhp", lpSrch="boot") returned 0x0
	[0122.108] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0122.108] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0122.108] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\*", lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2393490, ftCreationTime.dwHighDateTime=0x1d5debe, ftLastAccessTime.dwLowDateTime=0xcfc69410, ftLastAccessTime.dwHighDateTime=0x1d5e30f, ftLastWriteTime.dwLowDateTime=0xcfc69410, ftLastWriteTime.dwHighDateTime=0x1d5e30f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e950
	[0122.108] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0122.108] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0122.108] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0122.108] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0122.108] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0122.108] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2393490, ftCreationTime.dwHighDateTime=0x1d5debe, ftLastAccessTime.dwLowDateTime=0xcfc69410, ftLastAccessTime.dwHighDateTime=0x1d5e30f, ftLastWriteTime.dwLowDateTime=0xcfc69410, ftLastWriteTime.dwHighDateTime=0x1d5e30f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.108] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0122.108] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0122.108] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0122.108] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0122.109] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0122.109] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912154a0, ftCreationTime.dwHighDateTime=0x1d5e6fe, ftLastAccessTime.dwLowDateTime=0x63299070, ftLastAccessTime.dwHighDateTime=0x1d5e678, ftLastWriteTime.dwLowDateTime=0x63299070, ftLastWriteTime.dwHighDateTime=0x1d5e678, nFileSizeHigh=0x0, nFileSizeLow=0x18371, dwReserved0=0x0, dwReserved1=0x0, cFileName="3l-InIRqQiOsZWGu.mkv", cAlternateFileName="3L-INI~1.MKV")) returned 1
	[0122.109] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0122.109] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0122.109] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="ntldr") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="pagefile.sys") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="ntdetect.com") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="autoexec.bat") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="desktop.ini") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="autorun.inf") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="ntuser.dat") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="iconcache.db") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="bootsect.bak") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="boot.ini") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="bootfont.bin") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="config.sys") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="io.sys") returned 0x0
	[0122.109] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="msdos.sys") returned 0x0
	[0122.110] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="ntuser.dat.log") returned 0x0
	[0122.110] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="thumbs.db") returned 0x0
	[0122.110] StrStrW (lpFirst="3l-inirqqioszwgu.mkv", lpSrch="swapfile.sys") returned 0x0
	[0122.110] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\3l-InIRqQiOsZWGu.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\3l-inirqqioszwgu.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3f8
	[0122.110] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=99185) returned 1
	[0122.110] CreateIoCompletionPort (FileHandle=0x3f8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.110] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0122.123] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0122.123] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0122.123] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633220) returned 1
	[0122.128] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0122.128] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0122.128] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0122.138] GetLastError () returned 0x3e5
	[0122.138] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0122.138] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a4c540, ftCreationTime.dwHighDateTime=0x1d5d8e0, ftLastAccessTime.dwLowDateTime=0x4070780, ftLastAccessTime.dwHighDateTime=0x1d5dde0, ftLastWriteTime.dwLowDateTime=0x4070780, ftLastWriteTime.dwHighDateTime=0x1d5dde0, nFileSizeHigh=0x0, nFileSizeLow=0x1825a, dwReserved0=0x0, dwReserved1=0x0, cFileName="dJsEYftG92zAtaz.flv", cAlternateFileName="DJSEYF~1.FLV")) returned 1
	[0122.138] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0122.138] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0122.138] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0122.138] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.138] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="ntldr") returned 0x0
	[0122.138] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="pagefile.sys") returned 0x0
	[0122.138] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="ntdetect.com") returned 0x0
	[0122.138] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="autoexec.bat") returned 0x0
	[0122.138] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="desktop.ini") returned 0x0
	[0122.138] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="autorun.inf") returned 0x0
	[0122.138] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="ntuser.dat") returned 0x0
	[0122.138] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="iconcache.db") returned 0x0
	[0122.138] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="bootsect.bak") returned 0x0
	[0122.138] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="boot.ini") returned 0x0
	[0122.139] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="bootfont.bin") returned 0x0
	[0122.139] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="config.sys") returned 0x0
	[0122.139] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="io.sys") returned 0x0
	[0122.139] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="msdos.sys") returned 0x0
	[0122.139] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="ntuser.dat.log") returned 0x0
	[0122.139] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="thumbs.db") returned 0x0
	[0122.139] StrStrW (lpFirst="djseyftg92zataz.flv", lpSrch="swapfile.sys") returned 0x0
	[0122.139] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\dJsEYftG92zAtaz.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\djseyftg92zataz.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3f8
	[0122.139] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=98906) returned 1
	[0122.139] CreateIoCompletionPort (FileHandle=0x3f8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.139] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0122.175] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0122.175] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0122.175] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633220) returned 1
	[0122.176] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0122.176] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0122.177] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0122.188] GetLastError () returned 0x3e5
	[0122.188] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0122.188] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14aeb6a0, ftCreationTime.dwHighDateTime=0x1d5ddae, ftLastAccessTime.dwLowDateTime=0xd5c45b50, ftLastAccessTime.dwHighDateTime=0x1d5de90, ftLastWriteTime.dwLowDateTime=0xd5c45b50, ftLastWriteTime.dwHighDateTime=0x1d5de90, nFileSizeHigh=0x0, nFileSizeLow=0x123e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="D_Y_mWn1p8ipYfjXHpn_.mkv", cAlternateFileName="D_Y_MW~1.MKV")) returned 1
	[0122.188] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0122.188] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0122.188] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0122.188] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.188] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="ntldr") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="pagefile.sys") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="ntdetect.com") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="autoexec.bat") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="desktop.ini") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="autorun.inf") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="ntuser.dat") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="iconcache.db") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="bootsect.bak") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="boot.ini") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="bootfont.bin") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="config.sys") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="io.sys") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="msdos.sys") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="ntuser.dat.log") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="thumbs.db") returned 0x0
	[0122.189] StrStrW (lpFirst="d_y_mwn1p8ipyfjxhpn_.mkv", lpSrch="swapfile.sys") returned 0x0
	[0122.189] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\D_Y_mWn1p8ipYfjXHpn_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\d_y_mwn1p8ipyfjxhpn_.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3f8
	[0122.190] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=74725) returned 1
	[0122.190] CreateIoCompletionPort (FileHandle=0x3f8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.190] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0122.238] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0122.238] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0122.238] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633220) returned 1
	[0122.241] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0122.241] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0122.241] ReadFile (in: hFile=0x3f8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0122.243] GetLastError () returned 0x3e5
	[0122.243] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0122.243] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bbf03e0, ftCreationTime.dwHighDateTime=0x1d5df8c, ftLastAccessTime.dwLowDateTime=0x782c7b50, ftLastAccessTime.dwHighDateTime=0x1d5db2d, ftLastWriteTime.dwLowDateTime=0x782c7b50, ftLastWriteTime.dwHighDateTime=0x1d5db2d, nFileSizeHigh=0x0, nFileSizeLow=0x7d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="hIbWzD.mkv", cAlternateFileName="")) returned 1
	[0122.243] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0122.243] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0122.243] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="ntldr") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="pagefile.sys") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="ntdetect.com") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="autoexec.bat") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="desktop.ini") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="autorun.inf") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="ntuser.dat") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="iconcache.db") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="bootsect.bak") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="boot.ini") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="bootfont.bin") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="config.sys") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="io.sys") returned 0x0
	[0122.244] StrStrW (lpFirst="hibwzd.mkv", lpSrch="msdos.sys") returned 0x0
	[0122.245] StrStrW (lpFirst="hibwzd.mkv", lpSrch="ntuser.dat.log") returned 0x0
	[0122.245] StrStrW (lpFirst="hibwzd.mkv", lpSrch="thumbs.db") returned 0x0
	[0122.245] StrStrW (lpFirst="hibwzd.mkv", lpSrch="swapfile.sys") returned 0x0
	[0122.245] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\hIbWzD.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\hibwzd.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x378
	[0122.245] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=2001) returned 1
	[0122.246] CreateIoCompletionPort (FileHandle=0x378, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.246] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0122.261] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a060
	[0122.261] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0122.261] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633220) returned 1
	[0122.262] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0122.262] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0122.262] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0122.263] GetLastError () returned 0x3e5
	[0122.263] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0122.264] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddbb34a0, ftCreationTime.dwHighDateTime=0x1d5dc9c, ftLastAccessTime.dwLowDateTime=0xbae513e0, ftLastAccessTime.dwHighDateTime=0x1d5d861, ftLastWriteTime.dwLowDateTime=0xbae513e0, ftLastWriteTime.dwHighDateTime=0x1d5d861, nFileSizeHigh=0x0, nFileSizeLow=0xc43b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QcUdBWF5bkWxAByPbG.mp4", cAlternateFileName="QCUDBW~1.MP4")) returned 1
	[0122.264] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0122.264] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0122.264] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0122.264] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.264] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="ntldr") returned 0x0
	[0122.264] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="pagefile.sys") returned 0x0
	[0122.264] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="ntdetect.com") returned 0x0
	[0122.264] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="autoexec.bat") returned 0x0
	[0122.264] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="desktop.ini") returned 0x0
	[0122.264] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="autorun.inf") returned 0x0
	[0122.264] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="ntuser.dat") returned 0x0
	[0122.264] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="iconcache.db") returned 0x0
	[0122.264] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="bootsect.bak") returned 0x0
	[0122.265] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="boot.ini") returned 0x0
	[0122.265] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="bootfont.bin") returned 0x0
	[0122.265] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="config.sys") returned 0x0
	[0122.265] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="io.sys") returned 0x0
	[0122.265] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="msdos.sys") returned 0x0
	[0122.265] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0122.265] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="thumbs.db") returned 0x0
	[0122.265] StrStrW (lpFirst="qcudbwf5bkwxabypbg.mp4", lpSrch="swapfile.sys") returned 0x0
	[0122.265] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\QcUdBWF5bkWxAByPbG.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\qcudbwf5bkwxabypbg.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0122.265] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=50235) returned 1
	[0122.266] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.266] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0122.281] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0122.281] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d7f0
	[0122.281] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633220) returned 1
	[0122.283] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0122.283] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0122.283] ReadFile (in: hFile=0x3c4, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0122.284] GetLastError () returned 0x3e5
	[0122.284] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0122.284] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x265a51d0, ftCreationTime.dwHighDateTime=0x1d5dee8, ftLastAccessTime.dwLowDateTime=0xd3628760, ftLastAccessTime.dwHighDateTime=0x1d5d80a, ftLastWriteTime.dwLowDateTime=0xd3628760, ftLastWriteTime.dwHighDateTime=0x1d5d80a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenWTuGab6Fc7qSbS", cAlternateFileName="RENWTU~1")) returned 1
	[0122.284] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0122.284] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x4081858
	[0122.284] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0122.284] lstrcmpW (lpString1="..", lpString2="RenWTuGab6Fc7qSbS") returned -1
	[0122.284] lstrcmpW (lpString1=".", lpString2="RenWTuGab6Fc7qSbS") returned -1
	[0122.285] StrStrW (lpFirst="renwtugab6fc7qsbs", lpSrch="programdata") returned 0x0
	[0122.285] StrStrW (lpFirst="renwtugab6fc7qsbs", lpSrch="$recycle.bin") returned 0x0
	[0122.285] StrStrW (lpFirst="renwtugab6fc7qsbs", lpSrch="program files") returned 0x0
	[0122.285] StrStrW (lpFirst="renwtugab6fc7qsbs", lpSrch="windows") returned 0x0
	[0122.285] StrStrW (lpFirst="renwtugab6fc7qsbs", lpSrch="all users") returned 0x0
	[0122.285] StrStrW (lpFirst="renwtugab6fc7qsbs", lpSrch="winnt") returned 0x0
	[0122.285] StrStrW (lpFirst="renwtugab6fc7qsbs", lpSrch="appdata") returned 0x0
	[0122.285] StrStrW (lpFirst="renwtugab6fc7qsbs", lpSrch="application data") returned 0x0
	[0122.285] StrStrW (lpFirst="renwtugab6fc7qsbs", lpSrch="local settings") returned 0x0
	[0122.285] StrStrW (lpFirst="renwtugab6fc7qsbs", lpSrch="boot") returned 0x0
	[0122.285] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0122.285] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0122.285] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\RenWTuGab6Fc7qSbS\\*", lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x265a51d0, ftCreationTime.dwHighDateTime=0x1d5dee8, ftLastAccessTime.dwLowDateTime=0xd3628760, ftLastAccessTime.dwHighDateTime=0x1d5d80a, ftLastWriteTime.dwLowDateTime=0xd3628760, ftLastWriteTime.dwHighDateTime=0x1d5d80a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea50
	[0122.286] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0122.286] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0122.286] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0122.286] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0122.286] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0122.286] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x265a51d0, ftCreationTime.dwHighDateTime=0x1d5dee8, ftLastAccessTime.dwLowDateTime=0xd3628760, ftLastAccessTime.dwHighDateTime=0x1d5d80a, ftLastWriteTime.dwLowDateTime=0xd3628760, ftLastWriteTime.dwHighDateTime=0x1d5d80a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.286] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0122.286] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0122.286] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0122.286] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e14f0a0, ftCreationTime.dwHighDateTime=0x1d5dcee, ftLastAccessTime.dwLowDateTime=0x33326a00, ftLastAccessTime.dwHighDateTime=0x1d5da92, ftLastWriteTime.dwLowDateTime=0x33326a00, ftLastWriteTime.dwHighDateTime=0x1d5da92, nFileSizeHigh=0x0, nFileSizeLow=0x14148, dwReserved0=0x0, dwReserved1=0x0, cFileName="a8AwJr7e8zC83.mp4", cAlternateFileName="A8AWJR~1.MP4")) returned 1
	[0122.287] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0122.287] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x40819f8
	[0122.287] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0122.287] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.287] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="ntldr") returned 0x0
	[0122.287] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="pagefile.sys") returned 0x0
	[0122.287] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="ntdetect.com") returned 0x0
	[0122.287] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="autoexec.bat") returned 0x0
	[0122.287] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="desktop.ini") returned 0x0
	[0122.287] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="autorun.inf") returned 0x0
	[0122.287] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="ntuser.dat") returned 0x0
	[0122.287] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="iconcache.db") returned 0x0
	[0122.287] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="bootsect.bak") returned 0x0
	[0122.287] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="boot.ini") returned 0x0
	[0122.288] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="bootfont.bin") returned 0x0
	[0122.288] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="config.sys") returned 0x0
	[0122.288] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="io.sys") returned 0x0
	[0122.288] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="msdos.sys") returned 0x0
	[0122.289] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0122.289] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="thumbs.db") returned 0x0
	[0122.289] StrStrW (lpFirst="a8awjr7e8zc83.mp4", lpSrch="swapfile.sys") returned 0x0
	[0122.289] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\RenWTuGab6Fc7qSbS\\a8AwJr7e8zC83.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\renwtugab6fc7qsbs\\a8awjr7e8zc83.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0122.290] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=82248) returned 1
	[0122.290] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.290] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4ab0020
	[0122.307] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0122.307] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0122.307] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633220) returned 1
	[0122.308] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0122.308] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0122.308] ReadFile (in: hFile=0x3ec, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0122.309] GetLastError () returned 0x3e5
	[0122.309] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0122.309] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x137909c0, ftCreationTime.dwHighDateTime=0x1d5dcd2, ftLastAccessTime.dwLowDateTime=0x8233a470, ftLastAccessTime.dwHighDateTime=0x1d5e465, ftLastWriteTime.dwLowDateTime=0x8233a470, ftLastWriteTime.dwHighDateTime=0x1d5e465, nFileSizeHigh=0x0, nFileSizeLow=0xbdef, dwReserved0=0x0, dwReserved1=0x0, cFileName="cRE4.mp4", cAlternateFileName="")) returned 1
	[0122.309] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0122.309] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x40819f8
	[0122.310] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0122.310] StrStrW (lpFirst="cre4.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.310] StrStrW (lpFirst="cre4.mp4", lpSrch="ntldr") returned 0x0
	[0122.310] StrStrW (lpFirst="cre4.mp4", lpSrch="pagefile.sys") returned 0x0
	[0122.310] StrStrW (lpFirst="cre4.mp4", lpSrch="ntdetect.com") returned 0x0
	[0122.310] StrStrW (lpFirst="cre4.mp4", lpSrch="autoexec.bat") returned 0x0
	[0122.310] StrStrW (lpFirst="cre4.mp4", lpSrch="desktop.ini") returned 0x0
	[0122.310] StrStrW (lpFirst="cre4.mp4", lpSrch="autorun.inf") returned 0x0
	[0122.310] StrStrW (lpFirst="cre4.mp4", lpSrch="ntuser.dat") returned 0x0
	[0122.310] StrStrW (lpFirst="cre4.mp4", lpSrch="iconcache.db") returned 0x0
	[0122.310] StrStrW (lpFirst="cre4.mp4", lpSrch="bootsect.bak") returned 0x0
	[0122.310] StrStrW (lpFirst="cre4.mp4", lpSrch="boot.ini") returned 0x0
	[0122.311] StrStrW (lpFirst="cre4.mp4", lpSrch="bootfont.bin") returned 0x0
	[0122.311] StrStrW (lpFirst="cre4.mp4", lpSrch="config.sys") returned 0x0
	[0122.311] StrStrW (lpFirst="cre4.mp4", lpSrch="io.sys") returned 0x0
	[0122.311] StrStrW (lpFirst="cre4.mp4", lpSrch="msdos.sys") returned 0x0
	[0122.311] StrStrW (lpFirst="cre4.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0122.311] StrStrW (lpFirst="cre4.mp4", lpSrch="thumbs.db") returned 0x0
	[0122.312] StrStrW (lpFirst="cre4.mp4", lpSrch="swapfile.sys") returned 0x0
	[0122.312] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\RenWTuGab6Fc7qSbS\\cRE4.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\renwtugab6fc7qsbs\\cre4.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0122.313] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=48623) returned 1
	[0122.313] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.313] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4bb0020
	[0122.348] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0122.348] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x4045050
	[0122.349] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633220) returned 1
	[0122.350] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0122.350] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0122.350] ReadFile (in: hFile=0x38c, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 1
	[0122.351] GetLastError () returned 0x3e5
	[0122.351] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0122.351] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5744980, ftCreationTime.dwHighDateTime=0x1d5e7e6, ftLastAccessTime.dwLowDateTime=0xa226b220, ftLastAccessTime.dwHighDateTime=0x1d5dd1e, ftLastWriteTime.dwLowDateTime=0xa226b220, ftLastWriteTime.dwHighDateTime=0x1d5dd1e, nFileSizeHigh=0x0, nFileSizeLow=0xcdc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="JsWHJF1ceXN-F7HB5.mp4", cAlternateFileName="JSWHJF~1.MP4")) returned 1
	[0122.351] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0122.351] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x40819f8
	[0122.351] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0122.351] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.351] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="ntldr") returned 0x0
	[0122.351] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="pagefile.sys") returned 0x0
	[0122.351] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="ntdetect.com") returned 0x0
	[0122.352] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="autoexec.bat") returned 0x0
	[0122.352] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="desktop.ini") returned 0x0
	[0122.352] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="autorun.inf") returned 0x0
	[0122.352] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="ntuser.dat") returned 0x0
	[0122.352] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="iconcache.db") returned 0x0
	[0122.352] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="bootsect.bak") returned 0x0
	[0122.352] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="boot.ini") returned 0x0
	[0122.352] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="bootfont.bin") returned 0x0
	[0122.352] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="config.sys") returned 0x0
	[0122.352] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="io.sys") returned 0x0
	[0122.352] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="msdos.sys") returned 0x0
	[0122.352] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0122.353] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="thumbs.db") returned 0x0
	[0122.353] StrStrW (lpFirst="jswhjf1cexn-f7hb5.mp4", lpSrch="swapfile.sys") returned 0x0
	[0122.353] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\RenWTuGab6Fc7qSbS\\JsWHJF1ceXN-F7HB5.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\renwtugab6fc7qsbs\\jswhjf1cexn-f7hb5.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x37c
	[0122.353] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=52680) returned 1
	[0122.353] CreateIoCompletionPort (FileHandle=0x37c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.353] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4cb0020
	[0122.713] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0122.713] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0122.713] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633220) returned 1
	[0122.714] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0122.714] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0122.714] ReadFile (in: hFile=0x37c, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 0
	[0122.730] GetLastError () returned 0x3e5
	[0122.730] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40819f8 | out: hHeap=0x5f0000) returned 1
	[0122.730] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5744980, ftCreationTime.dwHighDateTime=0x1d5e7e6, ftLastAccessTime.dwLowDateTime=0xa226b220, ftLastAccessTime.dwHighDateTime=0x1d5dd1e, ftLastWriteTime.dwLowDateTime=0xa226b220, ftLastWriteTime.dwHighDateTime=0x1d5dd1e, nFileSizeHigh=0x0, nFileSizeLow=0xcdc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jswhjf1cexn-f7hb5.mp4", cAlternateFileName="JSWHJF~1.MP4")) returned 0
	[0122.730] FindClose (in: hFindFile=0x61ea50 | out: hFindFile=0x61ea50) returned 1
	[0122.730] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0122.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0122.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x35166c0
	[0122.731] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0122.731] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\RenWTuGab6Fc7qSbS\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\renwtugab6fc7qsbs\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0122.731] WriteFile (in: hFile=0x3e0, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e1e4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e1e4*=0x512, lpOverlapped=0x0) returned 1
	[0122.733] CloseHandle (hObject=0x3e0) returned 1
	[0122.733] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0122.733] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0122.733] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0122.733] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081858 | out: hHeap=0x5f0000) returned 1
	[0122.733] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80758830, ftCreationTime.dwHighDateTime=0x1d5e28d, ftLastAccessTime.dwLowDateTime=0x4e9bfbc0, ftLastAccessTime.dwHighDateTime=0x1d5df2f, ftLastWriteTime.dwLowDateTime=0x4e9bfbc0, ftLastWriteTime.dwHighDateTime=0x1d5df2f, nFileSizeHigh=0x0, nFileSizeLow=0x71d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="xj5XTtEiJcf9TZamLjS.avi", cAlternateFileName="XJ5XTT~1.AVI")) returned 1
	[0122.733] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0122.733] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x3517098
	[0122.733] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0122.733] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.733] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="ntldr") returned 0x0
	[0122.733] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="pagefile.sys") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="ntdetect.com") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="autoexec.bat") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="desktop.ini") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="autorun.inf") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="ntuser.dat") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="iconcache.db") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="bootsect.bak") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="boot.ini") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="bootfont.bin") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="config.sys") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="io.sys") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="msdos.sys") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="ntuser.dat.log") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="thumbs.db") returned 0x0
	[0122.734] StrStrW (lpFirst="xj5xtteijcf9tzamljs.avi", lpSrch="swapfile.sys") returned 0x0
	[0122.734] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\xj5XTtEiJcf9TZamLjS.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\xj5xtteijcf9tzamljs.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0122.735] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=29137) returned 1
	[0122.735] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.735] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0122.747] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0122.747] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0122.748] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633220) returned 1
	[0122.750] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0122.750] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0122.750] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0122.758] GetLastError () returned 0x3e5
	[0122.758] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0122.758] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80758830, ftCreationTime.dwHighDateTime=0x1d5e28d, ftLastAccessTime.dwLowDateTime=0x4e9bfbc0, ftLastAccessTime.dwHighDateTime=0x1d5df2f, ftLastWriteTime.dwLowDateTime=0x4e9bfbc0, ftLastWriteTime.dwHighDateTime=0x1d5df2f, nFileSizeHigh=0x0, nFileSizeLow=0x71d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="xj5xtteijcf9tzamljs.avi", cAlternateFileName="XJ5XTT~1.AVI")) returned 0
	[0122.758] FindClose (in: hFindFile=0x61e950 | out: hFindFile=0x61e950) returned 1
	[0122.759] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0122.759] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0122.759] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x3517098
	[0122.759] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0122.759] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\EJ0UHp\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\ej0uhp\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0122.759] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e514, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e514*=0x512, lpOverlapped=0x0) returned 1
	[0122.761] CloseHandle (hObject=0x3d8) returned 1
	[0122.761] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0122.761] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0122.761] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0122.761] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0122.761] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x406faa0, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0xa1e837a0, ftLastAccessTime.dwHighDateTime=0x1d5df91, ftLastWriteTime.dwLowDateTime=0xa1e837a0, ftLastWriteTime.dwHighDateTime=0x1d5df91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jilWiA8_jW", cAlternateFileName="JILWIA~1")) returned 1
	[0122.761] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0122.761] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0122.761] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0122.761] lstrcmpW (lpString1="..", lpString2="jilWiA8_jW") returned -1
	[0122.761] lstrcmpW (lpString1=".", lpString2="jilWiA8_jW") returned -1
	[0122.761] StrStrW (lpFirst="jilwia8_jw", lpSrch="programdata") returned 0x0
	[0122.761] StrStrW (lpFirst="jilwia8_jw", lpSrch="$recycle.bin") returned 0x0
	[0122.762] StrStrW (lpFirst="jilwia8_jw", lpSrch="program files") returned 0x0
	[0122.762] StrStrW (lpFirst="jilwia8_jw", lpSrch="windows") returned 0x0
	[0122.762] StrStrW (lpFirst="jilwia8_jw", lpSrch="all users") returned 0x0
	[0122.762] StrStrW (lpFirst="jilwia8_jw", lpSrch="winnt") returned 0x0
	[0122.762] StrStrW (lpFirst="jilwia8_jw", lpSrch="appdata") returned 0x0
	[0122.762] StrStrW (lpFirst="jilwia8_jw", lpSrch="application data") returned 0x0
	[0122.762] StrStrW (lpFirst="jilwia8_jw", lpSrch="local settings") returned 0x0
	[0122.762] StrStrW (lpFirst="jilwia8_jw", lpSrch="boot") returned 0x0
	[0122.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0122.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0122.762] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\*", lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x406faa0, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0xa1e837a0, ftLastAccessTime.dwHighDateTime=0x1d5df91, ftLastWriteTime.dwLowDateTime=0xa1e837a0, ftLastWriteTime.dwHighDateTime=0x1d5df91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e950
	[0122.762] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0122.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0122.762] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0122.762] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0122.762] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0122.762] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x406faa0, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0xa1e837a0, ftLastAccessTime.dwHighDateTime=0x1d5df91, ftLastWriteTime.dwLowDateTime=0xa1e837a0, ftLastWriteTime.dwHighDateTime=0x1d5df91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.763] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0122.763] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0122.763] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0122.763] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed471720, ftCreationTime.dwHighDateTime=0x1d5de65, ftLastAccessTime.dwLowDateTime=0x17ab1290, ftLastAccessTime.dwHighDateTime=0x1d5e394, ftLastWriteTime.dwLowDateTime=0x17ab1290, ftLastWriteTime.dwHighDateTime=0x1d5e394, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dB9YwY", cAlternateFileName="")) returned 1
	[0122.763] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0122.763] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0122.763] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0122.763] lstrcmpW (lpString1="..", lpString2="dB9YwY") returned -1
	[0122.763] lstrcmpW (lpString1=".", lpString2="dB9YwY") returned -1
	[0122.763] StrStrW (lpFirst="db9ywy", lpSrch="programdata") returned 0x0
	[0122.763] StrStrW (lpFirst="db9ywy", lpSrch="$recycle.bin") returned 0x0
	[0122.763] StrStrW (lpFirst="db9ywy", lpSrch="program files") returned 0x0
	[0122.763] StrStrW (lpFirst="db9ywy", lpSrch="windows") returned 0x0
	[0122.763] StrStrW (lpFirst="db9ywy", lpSrch="all users") returned 0x0
	[0122.763] StrStrW (lpFirst="db9ywy", lpSrch="winnt") returned 0x0
	[0122.763] StrStrW (lpFirst="db9ywy", lpSrch="appdata") returned 0x0
	[0122.763] StrStrW (lpFirst="db9ywy", lpSrch="application data") returned 0x0
	[0122.763] StrStrW (lpFirst="db9ywy", lpSrch="local settings") returned 0x0
	[0122.763] StrStrW (lpFirst="db9ywy", lpSrch="boot") returned 0x0
	[0122.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0122.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0122.764] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\dB9YwY\\*", lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed471720, ftCreationTime.dwHighDateTime=0x1d5de65, ftLastAccessTime.dwLowDateTime=0x17ab1290, ftLastAccessTime.dwHighDateTime=0x1d5e394, ftLastWriteTime.dwLowDateTime=0x17ab1290, ftLastWriteTime.dwHighDateTime=0x1d5e394, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea50
	[0122.764] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0122.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0122.764] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0122.764] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0122.764] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0122.764] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed471720, ftCreationTime.dwHighDateTime=0x1d5de65, ftLastAccessTime.dwLowDateTime=0x17ab1290, ftLastAccessTime.dwHighDateTime=0x1d5e394, ftLastWriteTime.dwLowDateTime=0x17ab1290, ftLastWriteTime.dwHighDateTime=0x1d5e394, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0122.764] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0122.764] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0122.764] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7ebb40, ftCreationTime.dwHighDateTime=0x1d5dad6, ftLastAccessTime.dwLowDateTime=0x5181ab0, ftLastAccessTime.dwHighDateTime=0x1d5dab1, ftLastWriteTime.dwLowDateTime=0x5181ab0, ftLastWriteTime.dwHighDateTime=0x1d5dab1, nFileSizeHigh=0x0, nFileSizeLow=0x3c02, dwReserved0=0x0, dwReserved1=0x0, cFileName="C4xg.flv", cAlternateFileName="")) returned 1
	[0122.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0122.764] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x35166c0
	[0122.764] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0122.764] StrStrW (lpFirst="c4xg.flv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.764] StrStrW (lpFirst="c4xg.flv", lpSrch="ntldr") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="pagefile.sys") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="ntdetect.com") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="autoexec.bat") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="desktop.ini") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="autorun.inf") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="ntuser.dat") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="iconcache.db") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="bootsect.bak") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="boot.ini") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="bootfont.bin") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="config.sys") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="io.sys") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="msdos.sys") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="ntuser.dat.log") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="thumbs.db") returned 0x0
	[0122.765] StrStrW (lpFirst="c4xg.flv", lpSrch="swapfile.sys") returned 0x0
	[0122.765] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\dB9YwY\\C4xg.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\db9ywy\\c4xg.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x37c
	[0122.766] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=15362) returned 1
	[0122.766] CreateIoCompletionPort (FileHandle=0x37c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.766] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0122.786] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0122.786] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0122.786] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0122.787] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0122.787] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0122.787] ReadFile (in: hFile=0x37c, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0122.796] GetLastError () returned 0x3e5
	[0122.796] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0122.797] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a72a80, ftCreationTime.dwHighDateTime=0x1d5da0f, ftLastAccessTime.dwLowDateTime=0x210ddf00, ftLastAccessTime.dwHighDateTime=0x1d5e7e2, ftLastWriteTime.dwLowDateTime=0x210ddf00, ftLastWriteTime.dwHighDateTime=0x1d5e7e2, nFileSizeHigh=0x0, nFileSizeLow=0x42e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="O6mLEbndz6QGzt-wts.mp4", cAlternateFileName="O6MLEB~1.MP4")) returned 1
	[0122.797] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0122.797] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x35166c0
	[0122.797] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="ntldr") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="pagefile.sys") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="ntdetect.com") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="autoexec.bat") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="desktop.ini") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="autorun.inf") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="ntuser.dat") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="iconcache.db") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="bootsect.bak") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="boot.ini") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="bootfont.bin") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="config.sys") returned 0x0
	[0122.797] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="io.sys") returned 0x0
	[0122.798] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="msdos.sys") returned 0x0
	[0122.798] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0122.798] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="thumbs.db") returned 0x0
	[0122.798] StrStrW (lpFirst="o6mlebndz6qgzt-wts.mp4", lpSrch="swapfile.sys") returned 0x0
	[0122.798] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\dB9YwY\\O6mLEbndz6QGzt-wts.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\db9ywy\\o6mlebndz6qgzt-wts.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3b8
	[0122.798] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=17124) returned 1
	[0122.798] CreateIoCompletionPort (FileHandle=0x3b8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.798] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0122.812] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0122.812] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0122.812] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0122.813] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0122.813] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0122.813] ReadFile (in: hFile=0x3b8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0122.824] GetLastError () returned 0x3e5
	[0122.824] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0122.824] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a72a80, ftCreationTime.dwHighDateTime=0x1d5da0f, ftLastAccessTime.dwLowDateTime=0x210ddf00, ftLastAccessTime.dwHighDateTime=0x1d5e7e2, ftLastWriteTime.dwLowDateTime=0x210ddf00, ftLastWriteTime.dwHighDateTime=0x1d5e7e2, nFileSizeHigh=0x0, nFileSizeLow=0x42e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="o6mlebndz6qgzt-wts.mp4", cAlternateFileName="O6MLEB~1.MP4")) returned 0
	[0122.824] FindClose (in: hFindFile=0x61ea50 | out: hFindFile=0x61ea50) returned 1
	[0122.824] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0122.824] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0122.825] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x35166c0
	[0122.825] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0122.825] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\dB9YwY\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\db9ywy\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0122.825] WriteFile (in: hFile=0x3e0, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e1e4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e1e4*=0x512, lpOverlapped=0x0) returned 1
	[0122.830] CloseHandle (hObject=0x3e0) returned 1
	[0122.830] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0122.830] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0122.830] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639f30 | out: hHeap=0x5f0000) returned 1
	[0122.830] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0122.830] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x339e40f0, ftCreationTime.dwHighDateTime=0x1d5e563, ftLastAccessTime.dwLowDateTime=0x514d8620, ftLastAccessTime.dwHighDateTime=0x1d5db1c, ftLastWriteTime.dwLowDateTime=0x514d8620, ftLastWriteTime.dwHighDateTime=0x1d5db1c, nFileSizeHigh=0x0, nFileSizeLow=0xc5e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="hb83Wc0b.flv", cAlternateFileName="")) returned 1
	[0122.830] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0122.830] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0122.831] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="ntldr") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="pagefile.sys") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="ntdetect.com") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="autoexec.bat") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="desktop.ini") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="autorun.inf") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="ntuser.dat") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="iconcache.db") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="bootsect.bak") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="boot.ini") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="bootfont.bin") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="config.sys") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="io.sys") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="msdos.sys") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="ntuser.dat.log") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="thumbs.db") returned 0x0
	[0122.831] StrStrW (lpFirst="hb83wc0b.flv", lpSrch="swapfile.sys") returned 0x0
	[0122.832] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\hb83Wc0b.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\hb83wc0b.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0122.832] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=50657) returned 1
	[0122.832] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.832] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0122.845] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639f30
	[0122.845] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0122.845] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0122.846] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0122.846] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0122.846] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0122.854] GetLastError () returned 0x3e5
	[0122.854] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0122.854] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88933740, ftCreationTime.dwHighDateTime=0x1d5e3b6, ftLastAccessTime.dwLowDateTime=0xf81a3f40, ftLastAccessTime.dwHighDateTime=0x1d5d8a9, ftLastWriteTime.dwLowDateTime=0xf81a3f40, ftLastWriteTime.dwHighDateTime=0x1d5d8a9, nFileSizeHigh=0x0, nFileSizeLow=0xb835, dwReserved0=0x0, dwReserved1=0x0, cFileName="ifQGThn.avi", cAlternateFileName="")) returned 1
	[0122.854] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0122.854] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0122.854] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="ntldr") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="pagefile.sys") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="ntdetect.com") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="autoexec.bat") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="desktop.ini") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="autorun.inf") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="ntuser.dat") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="iconcache.db") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="bootsect.bak") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="boot.ini") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="bootfont.bin") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="config.sys") returned 0x0
	[0122.854] StrStrW (lpFirst="ifqgthn.avi", lpSrch="io.sys") returned 0x0
	[0122.855] StrStrW (lpFirst="ifqgthn.avi", lpSrch="msdos.sys") returned 0x0
	[0122.855] StrStrW (lpFirst="ifqgthn.avi", lpSrch="ntuser.dat.log") returned 0x0
	[0122.855] StrStrW (lpFirst="ifqgthn.avi", lpSrch="thumbs.db") returned 0x0
	[0122.855] StrStrW (lpFirst="ifqgthn.avi", lpSrch="swapfile.sys") returned 0x0
	[0122.855] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\ifQGThn.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\ifqgthn.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0122.855] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=47157) returned 1
	[0122.855] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.855] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0122.959] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0122.959] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0122.960] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0122.961] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0122.961] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0122.961] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0122.970] GetLastError () returned 0x3e5
	[0122.970] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0122.970] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7914de60, ftCreationTime.dwHighDateTime=0x1d5e684, ftLastAccessTime.dwLowDateTime=0x198c9ce0, ftLastAccessTime.dwHighDateTime=0x1d5d959, ftLastWriteTime.dwLowDateTime=0x198c9ce0, ftLastWriteTime.dwHighDateTime=0x1d5d959, nFileSizeHigh=0x0, nFileSizeLow=0xe831, dwReserved0=0x0, dwReserved1=0x0, cFileName="N03oAf2CJF4H5ES.avi", cAlternateFileName="N03OAF~1.AVI")) returned 1
	[0122.970] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0122.970] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0122.970] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="ntldr") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="pagefile.sys") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="ntdetect.com") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="autoexec.bat") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="desktop.ini") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="autorun.inf") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="ntuser.dat") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="iconcache.db") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="bootsect.bak") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="boot.ini") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="bootfont.bin") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="config.sys") returned 0x0
	[0122.970] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="io.sys") returned 0x0
	[0122.971] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="msdos.sys") returned 0x0
	[0122.971] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="ntuser.dat.log") returned 0x0
	[0122.971] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="thumbs.db") returned 0x0
	[0122.971] StrStrW (lpFirst="n03oaf2cjf4h5es.avi", lpSrch="swapfile.sys") returned 0x0
	[0122.971] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\N03oAf2CJF4H5ES.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\n03oaf2cjf4h5es.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0122.971] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=59441) returned 1
	[0122.971] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.971] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0122.983] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0122.983] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0122.983] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0122.984] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0122.985] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0122.985] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0122.993] GetLastError () returned 0x3e5
	[0122.993] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0122.993] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5f263c0, ftCreationTime.dwHighDateTime=0x1d5d7ed, ftLastAccessTime.dwLowDateTime=0x3f57fb60, ftLastAccessTime.dwHighDateTime=0x1d5e10e, ftLastWriteTime.dwLowDateTime=0x3f57fb60, ftLastWriteTime.dwHighDateTime=0x1d5e10e, nFileSizeHigh=0x0, nFileSizeLow=0xa0e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="RDXmfRE-VouSP6.avi", cAlternateFileName="RDXMFR~1.AVI")) returned 1
	[0122.993] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0122.993] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0122.993] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0122.993] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0122.993] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="ntldr") returned 0x0
	[0122.993] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="pagefile.sys") returned 0x0
	[0122.993] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="ntdetect.com") returned 0x0
	[0122.993] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="autoexec.bat") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="desktop.ini") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="autorun.inf") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="ntuser.dat") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="iconcache.db") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="bootsect.bak") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="boot.ini") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="bootfont.bin") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="config.sys") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="io.sys") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="msdos.sys") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="ntuser.dat.log") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="thumbs.db") returned 0x0
	[0122.994] StrStrW (lpFirst="rdxmfre-vousp6.avi", lpSrch="swapfile.sys") returned 0x0
	[0122.994] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\RDXmfRE-VouSP6.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\rdxmfre-vousp6.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0122.994] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=41185) returned 1
	[0122.995] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0122.995] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.007] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.007] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0123.007] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0123.008] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0123.008] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.008] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.017] GetLastError () returned 0x3e5
	[0123.017] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0123.017] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x398c2db0, ftCreationTime.dwHighDateTime=0x1d5e59a, ftLastAccessTime.dwLowDateTime=0x97d49a00, ftLastAccessTime.dwHighDateTime=0x1d5e19f, ftLastWriteTime.dwLowDateTime=0x97d49a00, ftLastWriteTime.dwHighDateTime=0x1d5e19f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uN fiEdAHo0VBfS4emS", cAlternateFileName="UNFIED~1")) returned 1
	[0123.017] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0123.017] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0123.017] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0123.017] lstrcmpW (lpString1="..", lpString2="uN fiEdAHo0VBfS4emS") returned -1
	[0123.017] lstrcmpW (lpString1=".", lpString2="uN fiEdAHo0VBfS4emS") returned -1
	[0123.017] StrStrW (lpFirst="un fiedaho0vbfs4ems", lpSrch="programdata") returned 0x0
	[0123.017] StrStrW (lpFirst="un fiedaho0vbfs4ems", lpSrch="$recycle.bin") returned 0x0
	[0123.018] StrStrW (lpFirst="un fiedaho0vbfs4ems", lpSrch="program files") returned 0x0
	[0123.018] StrStrW (lpFirst="un fiedaho0vbfs4ems", lpSrch="windows") returned 0x0
	[0123.018] StrStrW (lpFirst="un fiedaho0vbfs4ems", lpSrch="all users") returned 0x0
	[0123.018] StrStrW (lpFirst="un fiedaho0vbfs4ems", lpSrch="winnt") returned 0x0
	[0123.018] StrStrW (lpFirst="un fiedaho0vbfs4ems", lpSrch="appdata") returned 0x0
	[0123.018] StrStrW (lpFirst="un fiedaho0vbfs4ems", lpSrch="application data") returned 0x0
	[0123.018] StrStrW (lpFirst="un fiedaho0vbfs4ems", lpSrch="local settings") returned 0x0
	[0123.018] StrStrW (lpFirst="un fiedaho0vbfs4ems", lpSrch="boot") returned 0x0
	[0123.018] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0123.018] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.018] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\*", lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x398c2db0, ftCreationTime.dwHighDateTime=0x1d5e59a, ftLastAccessTime.dwLowDateTime=0x97d49a00, ftLastAccessTime.dwHighDateTime=0x1d5e19f, ftLastWriteTime.dwLowDateTime=0x97d49a00, ftLastWriteTime.dwHighDateTime=0x1d5e19f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea50
	[0123.018] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.018] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.018] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.018] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.018] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.018] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x398c2db0, ftCreationTime.dwHighDateTime=0x1d5e59a, ftLastAccessTime.dwLowDateTime=0x97d49a00, ftLastAccessTime.dwHighDateTime=0x1d5e19f, ftLastWriteTime.dwLowDateTime=0x97d49a00, ftLastWriteTime.dwHighDateTime=0x1d5e19f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.018] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.019] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x4081a80
	[0123.019] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.019] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.019] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081a80 | out: hHeap=0x5f0000) returned 1
	[0123.019] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31adb1d0, ftCreationTime.dwHighDateTime=0x1d5dddf, ftLastAccessTime.dwLowDateTime=0x6f140d20, ftLastAccessTime.dwHighDateTime=0x1d5daf7, ftLastWriteTime.dwLowDateTime=0x6f140d20, ftLastWriteTime.dwHighDateTime=0x1d5daf7, nFileSizeHigh=0x0, nFileSizeLow=0x17d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="3j6lnWD2iiLSh5P8Qus.swf", cAlternateFileName="3J6LNW~1.SWF")) returned 1
	[0123.019] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.019] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x4081a80
	[0123.019] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="ntldr") returned 0x0
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="pagefile.sys") returned 0x0
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="ntdetect.com") returned 0x0
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="autoexec.bat") returned 0x0
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="desktop.ini") returned 0x0
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="autorun.inf") returned 0x0
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="ntuser.dat") returned 0x0
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="iconcache.db") returned 0x0
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="bootsect.bak") returned 0x0
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="boot.ini") returned 0x0
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="bootfont.bin") returned 0x0
	[0123.019] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="config.sys") returned 0x0
	[0123.020] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="io.sys") returned 0x0
	[0123.020] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="msdos.sys") returned 0x0
	[0123.020] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="ntuser.dat.log") returned 0x0
	[0123.020] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="thumbs.db") returned 0x0
	[0123.020] StrStrW (lpFirst="3j6lnwd2iilsh5p8qus.swf", lpSrch="swapfile.sys") returned 0x0
	[0123.020] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\3j6lnWD2iiLSh5P8Qus.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\3j6lnwd2iilsh5p8qus.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3b8
	[0123.020] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=97635) returned 1
	[0123.020] CreateIoCompletionPort (FileHandle=0x3b8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.020] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.033] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618f88
	[0123.033] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0123.033] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0123.035] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0123.035] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.035] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.045] GetLastError () returned 0x3e5
	[0123.045] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081a80 | out: hHeap=0x5f0000) returned 1
	[0123.045] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b00b00, ftCreationTime.dwHighDateTime=0x1d5df1f, ftLastAccessTime.dwLowDateTime=0x3eee6310, ftLastAccessTime.dwHighDateTime=0x1d5e1dd, ftLastWriteTime.dwLowDateTime=0x3eee6310, ftLastWriteTime.dwHighDateTime=0x1d5e1dd, nFileSizeHigh=0x0, nFileSizeLow=0x117f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gIwtU-.mkv", cAlternateFileName="")) returned 1
	[0123.045] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.045] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x4081a80
	[0123.045] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.045] StrStrW (lpFirst="giwtu-.mkv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.045] StrStrW (lpFirst="giwtu-.mkv", lpSrch="ntldr") returned 0x0
	[0123.045] StrStrW (lpFirst="giwtu-.mkv", lpSrch="pagefile.sys") returned 0x0
	[0123.045] StrStrW (lpFirst="giwtu-.mkv", lpSrch="ntdetect.com") returned 0x0
	[0123.045] StrStrW (lpFirst="giwtu-.mkv", lpSrch="autoexec.bat") returned 0x0
	[0123.045] StrStrW (lpFirst="giwtu-.mkv", lpSrch="desktop.ini") returned 0x0
	[0123.045] StrStrW (lpFirst="giwtu-.mkv", lpSrch="autorun.inf") returned 0x0
	[0123.046] StrStrW (lpFirst="giwtu-.mkv", lpSrch="ntuser.dat") returned 0x0
	[0123.046] StrStrW (lpFirst="giwtu-.mkv", lpSrch="iconcache.db") returned 0x0
	[0123.046] StrStrW (lpFirst="giwtu-.mkv", lpSrch="bootsect.bak") returned 0x0
	[0123.046] StrStrW (lpFirst="giwtu-.mkv", lpSrch="boot.ini") returned 0x0
	[0123.046] StrStrW (lpFirst="giwtu-.mkv", lpSrch="bootfont.bin") returned 0x0
	[0123.046] StrStrW (lpFirst="giwtu-.mkv", lpSrch="config.sys") returned 0x0
	[0123.046] StrStrW (lpFirst="giwtu-.mkv", lpSrch="io.sys") returned 0x0
	[0123.046] StrStrW (lpFirst="giwtu-.mkv", lpSrch="msdos.sys") returned 0x0
	[0123.046] StrStrW (lpFirst="giwtu-.mkv", lpSrch="ntuser.dat.log") returned 0x0
	[0123.046] StrStrW (lpFirst="giwtu-.mkv", lpSrch="thumbs.db") returned 0x0
	[0123.046] StrStrW (lpFirst="giwtu-.mkv", lpSrch="swapfile.sys") returned 0x0
	[0123.046] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\gIwtU-.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\giwtu-.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3b8
	[0123.046] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=71664) returned 1
	[0123.046] CreateIoCompletionPort (FileHandle=0x3b8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.047] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.059] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0123.059] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0123.059] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0123.061] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0123.061] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.061] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.070] GetLastError () returned 0x3e5
	[0123.070] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081a80 | out: hHeap=0x5f0000) returned 1
	[0123.070] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee3a44b0, ftCreationTime.dwHighDateTime=0x1d5e21e, ftLastAccessTime.dwLowDateTime=0x1a1b610, ftLastAccessTime.dwHighDateTime=0x1d5da58, ftLastWriteTime.dwLowDateTime=0x1a1b610, ftLastWriteTime.dwHighDateTime=0x1d5da58, nFileSizeHigh=0x0, nFileSizeLow=0x15d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="HIPSXeLnDr.avi", cAlternateFileName="HIPSXE~1.AVI")) returned 1
	[0123.070] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.070] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x4081a80
	[0123.070] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="ntldr") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="pagefile.sys") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="ntdetect.com") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="autoexec.bat") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="desktop.ini") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="autorun.inf") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="ntuser.dat") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="iconcache.db") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="bootsect.bak") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="boot.ini") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="bootfont.bin") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="config.sys") returned 0x0
	[0123.070] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="io.sys") returned 0x0
	[0123.071] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="msdos.sys") returned 0x0
	[0123.071] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="ntuser.dat.log") returned 0x0
	[0123.071] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="thumbs.db") returned 0x0
	[0123.071] StrStrW (lpFirst="hipsxelndr.avi", lpSrch="swapfile.sys") returned 0x0
	[0123.071] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\HIPSXeLnDr.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\hipsxelndr.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3b8
	[0123.071] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=89459) returned 1
	[0123.071] CreateIoCompletionPort (FileHandle=0x3b8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.071] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.084] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0123.084] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0123.084] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0123.085] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0123.085] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.086] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.100] GetLastError () returned 0x3e5
	[0123.100] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081a80 | out: hHeap=0x5f0000) returned 1
	[0123.100] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbadc59c0, ftCreationTime.dwHighDateTime=0x1d5dab0, ftLastAccessTime.dwLowDateTime=0x97311a50, ftLastAccessTime.dwHighDateTime=0x1d5da89, ftLastWriteTime.dwLowDateTime=0x97311a50, ftLastWriteTime.dwHighDateTime=0x1d5da89, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="HYXKIjIn.swf", cAlternateFileName="")) returned 1
	[0123.100] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.100] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x4081a80
	[0123.100] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="ntldr") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="pagefile.sys") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="ntdetect.com") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="autoexec.bat") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="desktop.ini") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="autorun.inf") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="ntuser.dat") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="iconcache.db") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="bootsect.bak") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="boot.ini") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="bootfont.bin") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="config.sys") returned 0x0
	[0123.100] StrStrW (lpFirst="hyxkijin.swf", lpSrch="io.sys") returned 0x0
	[0123.101] StrStrW (lpFirst="hyxkijin.swf", lpSrch="msdos.sys") returned 0x0
	[0123.101] StrStrW (lpFirst="hyxkijin.swf", lpSrch="ntuser.dat.log") returned 0x0
	[0123.101] StrStrW (lpFirst="hyxkijin.swf", lpSrch="thumbs.db") returned 0x0
	[0123.101] StrStrW (lpFirst="hyxkijin.swf", lpSrch="swapfile.sys") returned 0x0
	[0123.101] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\HYXKIjIn.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\hyxkijin.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3b8
	[0123.101] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=74752) returned 1
	[0123.101] CreateIoCompletionPort (FileHandle=0x3b8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.101] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.114] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040128
	[0123.114] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0123.114] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0123.115] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0123.115] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.115] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.124] GetLastError () returned 0x3e5
	[0123.124] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081a80 | out: hHeap=0x5f0000) returned 1
	[0123.124] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce7cc670, ftCreationTime.dwHighDateTime=0x1d5e345, ftLastAccessTime.dwLowDateTime=0x5d359ad0, ftLastAccessTime.dwHighDateTime=0x1d5d8fc, ftLastWriteTime.dwLowDateTime=0x5d359ad0, ftLastWriteTime.dwHighDateTime=0x1d5d8fc, nFileSizeHigh=0x0, nFileSizeLow=0x15cf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JdLIRi8CM81z7CZXMLmh.mkv", cAlternateFileName="JDLIRI~1.MKV")) returned 1
	[0123.124] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.125] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x4081a80
	[0123.125] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="ntldr") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="pagefile.sys") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="ntdetect.com") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="autoexec.bat") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="desktop.ini") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="autorun.inf") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="ntuser.dat") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="iconcache.db") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="bootsect.bak") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="boot.ini") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="bootfont.bin") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="config.sys") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="io.sys") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="msdos.sys") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="ntuser.dat.log") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="thumbs.db") returned 0x0
	[0123.125] StrStrW (lpFirst="jdliri8cm81z7czxmlmh.mkv", lpSrch="swapfile.sys") returned 0x0
	[0123.125] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\JdLIRi8CM81z7CZXMLmh.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\jdliri8cm81z7czxmlmh.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3b8
	[0123.126] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=89331) returned 1
	[0123.126] CreateIoCompletionPort (FileHandle=0x3b8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.126] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.139] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0123.139] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0123.139] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0123.140] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0123.140] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.140] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.150] GetLastError () returned 0x3e5
	[0123.150] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081a80 | out: hHeap=0x5f0000) returned 1
	[0123.150] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2affe3f0, ftCreationTime.dwHighDateTime=0x1d5e2ec, ftLastAccessTime.dwLowDateTime=0xbc6e3ed0, ftLastAccessTime.dwHighDateTime=0x1d5da78, ftLastWriteTime.dwLowDateTime=0xbc6e3ed0, ftLastWriteTime.dwHighDateTime=0x1d5da78, nFileSizeHigh=0x0, nFileSizeLow=0x14479, dwReserved0=0x0, dwReserved1=0x0, cFileName="P9C_r9pxhuf-A.mp4", cAlternateFileName="P9C_R9~1.MP4")) returned 1
	[0123.150] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.150] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x4081a80
	[0123.150] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.150] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.150] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="ntldr") returned 0x0
	[0123.150] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="pagefile.sys") returned 0x0
	[0123.150] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="ntdetect.com") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="autoexec.bat") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="desktop.ini") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="autorun.inf") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="ntuser.dat") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="iconcache.db") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="bootsect.bak") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="boot.ini") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="bootfont.bin") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="config.sys") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="io.sys") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="msdos.sys") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="thumbs.db") returned 0x0
	[0123.151] StrStrW (lpFirst="p9c_r9pxhuf-a.mp4", lpSrch="swapfile.sys") returned 0x0
	[0123.151] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\P9C_r9pxhuf-A.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\p9c_r9pxhuf-a.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3b8
	[0123.152] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=83065) returned 1
	[0123.152] CreateIoCompletionPort (FileHandle=0x3b8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.152] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.167] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0123.167] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x672790
	[0123.167] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0123.168] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0123.168] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.168] ReadFile (in: hFile=0x3b8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.197] GetLastError () returned 0x3e5
	[0123.197] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081a80 | out: hHeap=0x5f0000) returned 1
	[0123.197] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52ba2320, ftCreationTime.dwHighDateTime=0x1d5e2eb, ftLastAccessTime.dwLowDateTime=0x11aa05f0, ftLastAccessTime.dwHighDateTime=0x1d5d87b, ftLastWriteTime.dwLowDateTime=0x11aa05f0, ftLastWriteTime.dwHighDateTime=0x1d5d87b, nFileSizeHigh=0x0, nFileSizeLow=0xfd73, dwReserved0=0x0, dwReserved1=0x0, cFileName="WJkXfc0y.avi", cAlternateFileName="")) returned 1
	[0123.197] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.197] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x4081a80
	[0123.197] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.197] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="ntldr") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="pagefile.sys") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="ntdetect.com") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="autoexec.bat") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="desktop.ini") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="autorun.inf") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="ntuser.dat") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="iconcache.db") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="bootsect.bak") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="boot.ini") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="bootfont.bin") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="config.sys") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="io.sys") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="msdos.sys") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="ntuser.dat.log") returned 0x0
	[0123.199] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="thumbs.db") returned 0x0
	[0123.200] StrStrW (lpFirst="wjkxfc0y.avi", lpSrch="swapfile.sys") returned 0x0
	[0123.200] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\WJkXfc0y.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\wjkxfc0y.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3c4
	[0123.200] GetFileSizeEx (in: hFile=0x3c4, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=64883) returned 1
	[0123.200] CreateIoCompletionPort (FileHandle=0x3c4, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.200] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.213] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40401f0
	[0123.213] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0123.213] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0123.214] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0123.214] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.214] ReadFile (in: hFile=0x3c4, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0x0
	[0123.218] GetLastError () returned 0x3e5
	[0123.218] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081a80 | out: hHeap=0x5f0000) returned 1
	[0123.218] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x598b0fb0, ftCreationTime.dwHighDateTime=0x1d5e38c, ftLastAccessTime.dwLowDateTime=0x87703460, ftLastAccessTime.dwHighDateTime=0x1d5e2a0, ftLastWriteTime.dwLowDateTime=0x87703460, ftLastWriteTime.dwHighDateTime=0x1d5e2a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xuQu0xo7-rgClLtX", cAlternateFileName="XUQU0X~1")) returned 1
	[0123.218] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.218] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x4081a80
	[0123.218] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643ef8 | out: hHeap=0x5f0000) returned 1
	[0123.218] lstrcmpW (lpString1="..", lpString2="xuQu0xo7-rgClLtX") returned -1
	[0123.218] lstrcmpW (lpString1=".", lpString2="xuQu0xo7-rgClLtX") returned -1
	[0123.218] StrStrW (lpFirst="xuqu0xo7-rgclltx", lpSrch="programdata") returned 0x0
	[0123.218] StrStrW (lpFirst="xuqu0xo7-rgclltx", lpSrch="$recycle.bin") returned 0x0
	[0123.218] StrStrW (lpFirst="xuqu0xo7-rgclltx", lpSrch="program files") returned 0x0
	[0123.218] StrStrW (lpFirst="xuqu0xo7-rgclltx", lpSrch="windows") returned 0x0
	[0123.218] StrStrW (lpFirst="xuqu0xo7-rgclltx", lpSrch="all users") returned 0x0
	[0123.218] StrStrW (lpFirst="xuqu0xo7-rgclltx", lpSrch="winnt") returned 0x0
	[0123.219] StrStrW (lpFirst="xuqu0xo7-rgclltx", lpSrch="appdata") returned 0x0
	[0123.219] StrStrW (lpFirst="xuqu0xo7-rgclltx", lpSrch="application data") returned 0x0
	[0123.219] StrStrW (lpFirst="xuqu0xo7-rgclltx", lpSrch="local settings") returned 0x0
	[0123.219] StrStrW (lpFirst="xuqu0xo7-rgclltx", lpSrch="boot") returned 0x0
	[0123.219] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40402b8
	[0123.219] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd0) returned 0x618eb0
	[0123.219] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\*", lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x598b0fb0, ftCreationTime.dwHighDateTime=0x1d5e38c, ftLastAccessTime.dwLowDateTime=0x87703460, ftLastAccessTime.dwHighDateTime=0x1d5e2a0, ftLastWriteTime.dwLowDateTime=0x87703460, ftLastWriteTime.dwHighDateTime=0x1d5e2a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e990
	[0123.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x618eb0 | out: hHeap=0x5f0000) returned 1
	[0123.219] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040380
	[0123.219] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x351fec8
	[0123.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040380 | out: hHeap=0x5f0000) returned 1
	[0123.219] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.219] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0123.219] FindNextFileW (in: hFindFile=0x61e990, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x598b0fb0, ftCreationTime.dwHighDateTime=0x1d5e38c, ftLastAccessTime.dwLowDateTime=0x87703460, ftLastAccessTime.dwHighDateTime=0x1d5e2a0, ftLastWriteTime.dwLowDateTime=0x87703460, ftLastWriteTime.dwHighDateTime=0x1d5e2a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.220] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040380
	[0123.220] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x351fec8
	[0123.220] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040380 | out: hHeap=0x5f0000) returned 1
	[0123.220] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.220] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0123.220] FindNextFileW (in: hFindFile=0x61e990, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5b63eb0, ftCreationTime.dwHighDateTime=0x1d5e74f, ftLastAccessTime.dwLowDateTime=0x671f0420, ftLastAccessTime.dwHighDateTime=0x1d5e273, ftLastWriteTime.dwLowDateTime=0x671f0420, ftLastWriteTime.dwHighDateTime=0x1d5e273, nFileSizeHigh=0x0, nFileSizeLow=0x1437b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DhBkHbv tGKoCn7s.swf", cAlternateFileName="DHBKHB~1.SWF")) returned 1
	[0123.220] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040380
	[0123.220] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x351fec8
	[0123.220] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040380 | out: hHeap=0x5f0000) returned 1
	[0123.220] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.220] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="ntldr") returned 0x0
	[0123.220] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="pagefile.sys") returned 0x0
	[0123.220] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="ntdetect.com") returned 0x0
	[0123.220] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="autoexec.bat") returned 0x0
	[0123.220] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="desktop.ini") returned 0x0
	[0123.220] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="autorun.inf") returned 0x0
	[0123.220] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="ntuser.dat") returned 0x0
	[0123.220] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="iconcache.db") returned 0x0
	[0123.221] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="bootsect.bak") returned 0x0
	[0123.221] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="boot.ini") returned 0x0
	[0123.221] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="bootfont.bin") returned 0x0
	[0123.221] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="config.sys") returned 0x0
	[0123.221] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="io.sys") returned 0x0
	[0123.221] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="msdos.sys") returned 0x0
	[0123.221] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="ntuser.dat.log") returned 0x0
	[0123.221] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="thumbs.db") returned 0x0
	[0123.221] StrStrW (lpFirst="dhbkhbv tgkocn7s.swf", lpSrch="swapfile.sys") returned 0x0
	[0123.221] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\DhBkHbv tGKoCn7s.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\dhbkhbv tgkocn7s.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0123.221] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=82811) returned 1
	[0123.221] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.222] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0123.238] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x672be0
	[0123.238] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0123.238] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0123.239] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0123.239] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.239] ReadFile (in: hFile=0x38c, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0x0
	[0123.242] GetLastError () returned 0x3e5
	[0123.242] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0123.242] FindNextFileW (in: hFindFile=0x61e990, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa288f080, ftCreationTime.dwHighDateTime=0x1d5d967, ftLastAccessTime.dwLowDateTime=0xd51b4f90, ftLastAccessTime.dwHighDateTime=0x1d5d839, ftLastWriteTime.dwLowDateTime=0xd51b4f90, ftLastWriteTime.dwHighDateTime=0x1d5d839, nFileSizeHigh=0x0, nFileSizeLow=0x58ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcsBz1BlcI.mp4", cAlternateFileName="LCSBZ1~1.MP4")) returned 1
	[0123.243] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040380
	[0123.243] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x351fec8
	[0123.243] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040380 | out: hHeap=0x5f0000) returned 1
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="ntldr") returned 0x0
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="pagefile.sys") returned 0x0
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="ntdetect.com") returned 0x0
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="autoexec.bat") returned 0x0
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="desktop.ini") returned 0x0
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="autorun.inf") returned 0x0
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="ntuser.dat") returned 0x0
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="iconcache.db") returned 0x0
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="bootsect.bak") returned 0x0
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="boot.ini") returned 0x0
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="bootfont.bin") returned 0x0
	[0123.243] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="config.sys") returned 0x0
	[0123.244] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="io.sys") returned 0x0
	[0123.244] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="msdos.sys") returned 0x0
	[0123.244] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0123.244] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="thumbs.db") returned 0x0
	[0123.244] StrStrW (lpFirst="lcsbz1blci.mp4", lpSrch="swapfile.sys") returned 0x0
	[0123.244] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\lcsBz1BlcI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\lcsbz1blci.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0123.244] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=22700) returned 1
	[0123.244] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.244] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0123.257] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043150
	[0123.257] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d7f0
	[0123.257] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0123.258] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0123.258] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.259] ReadFile (in: hFile=0x3ec, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0123.262] GetLastError () returned 0x3e5
	[0123.262] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0123.262] FindNextFileW (in: hFindFile=0x61e990, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18d783e0, ftCreationTime.dwHighDateTime=0x1d5de1e, ftLastAccessTime.dwLowDateTime=0xf9a9e2f0, ftLastAccessTime.dwHighDateTime=0x1d5dfdb, ftLastWriteTime.dwLowDateTime=0xf9a9e2f0, ftLastWriteTime.dwHighDateTime=0x1d5dfdb, nFileSizeHigh=0x0, nFileSizeLow=0x16e7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="RtWq1YR6YWVPw.swf", cAlternateFileName="RTWQ1Y~1.SWF")) returned 1
	[0123.262] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040380
	[0123.262] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x35166c0
	[0123.262] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040380 | out: hHeap=0x5f0000) returned 1
	[0123.262] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.262] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="ntldr") returned 0x0
	[0123.262] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="pagefile.sys") returned 0x0
	[0123.262] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="ntdetect.com") returned 0x0
	[0123.262] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="autoexec.bat") returned 0x0
	[0123.262] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="desktop.ini") returned 0x0
	[0123.262] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="autorun.inf") returned 0x0
	[0123.262] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="ntuser.dat") returned 0x0
	[0123.262] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="iconcache.db") returned 0x0
	[0123.262] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="bootsect.bak") returned 0x0
	[0123.263] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="boot.ini") returned 0x0
	[0123.263] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="bootfont.bin") returned 0x0
	[0123.263] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="config.sys") returned 0x0
	[0123.263] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="io.sys") returned 0x0
	[0123.263] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="msdos.sys") returned 0x0
	[0123.263] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="ntuser.dat.log") returned 0x0
	[0123.263] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="thumbs.db") returned 0x0
	[0123.263] StrStrW (lpFirst="rtwq1yr6ywvpw.swf", lpSrch="swapfile.sys") returned 0x0
	[0123.263] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\RtWq1YR6YWVPw.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\rtwq1yr6ywvpw.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3b8
	[0123.264] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=93823) returned 1
	[0123.264] CreateIoCompletionPort (FileHandle=0x3b8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.264] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4ab0020
	[0123.276] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351fec8
	[0123.276] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351aac8
	[0123.276] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0123.277] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0123.277] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.277] ReadFile (in: hFile=0x3b8, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 0x0
	[0123.282] GetLastError () returned 0x3e5
	[0123.282] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0123.282] FindNextFileW (in: hFindFile=0x61e990, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4cf040, ftCreationTime.dwHighDateTime=0x1d5e619, ftLastAccessTime.dwLowDateTime=0xc68883b0, ftLastAccessTime.dwHighDateTime=0x1d5df2f, ftLastWriteTime.dwLowDateTime=0xc68883b0, ftLastWriteTime.dwHighDateTime=0x1d5df2f, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssuKoHkWRjOccPH1.mp4", cAlternateFileName="SSUKOH~1.MP4")) returned 1
	[0123.282] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040380
	[0123.282] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x35166c0
	[0123.282] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040380 | out: hHeap=0x5f0000) returned 1
	[0123.282] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.282] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="ntldr") returned 0x0
	[0123.282] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="pagefile.sys") returned 0x0
	[0123.282] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="ntdetect.com") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="autoexec.bat") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="desktop.ini") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="autorun.inf") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="ntuser.dat") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="iconcache.db") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="bootsect.bak") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="boot.ini") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="bootfont.bin") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="config.sys") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="io.sys") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="msdos.sys") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="thumbs.db") returned 0x0
	[0123.283] StrStrW (lpFirst="ssukohkwrjoccph1.mp4", lpSrch="swapfile.sys") returned 0x0
	[0123.283] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\ssuKoHkWRjOccPH1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\ssukohkwrjoccph1.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x378
	[0123.284] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x3f6ddf8 | out: lpFileSize=0x3f6ddf8*=14856) returned 1
	[0123.284] CreateIoCompletionPort (FileHandle=0x378, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.284] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4bb0020
	[0123.297] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0) returned 0x351ffc0
	[0123.297] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351afd8
	[0123.297] CryptAcquireContextW (in: phProv=0x3f6dacc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6dacc*=0x633110) returned 1
	[0123.298] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6dae0 | out: pbBuffer=0x3f6dae0) returned 1
	[0123.298] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.298] ReadFile (in: hFile=0x378, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 0x0
	[0123.300] GetLastError () returned 0x3e5
	[0123.300] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0123.300] FindNextFileW (in: hFindFile=0x61e990, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4cf040, ftCreationTime.dwHighDateTime=0x1d5e619, ftLastAccessTime.dwLowDateTime=0xc68883b0, ftLastAccessTime.dwHighDateTime=0x1d5df2f, ftLastWriteTime.dwLowDateTime=0xc68883b0, ftLastWriteTime.dwHighDateTime=0x1d5df2f, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssukohkwrjoccph1.mp4", cAlternateFileName="SSUKOH~1.MP4")) returned 0
	[0123.300] FindClose (in: hFindFile=0x61e990 | out: hFindFile=0x61e990) returned 1
	[0123.300] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0123.300] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040380
	[0123.300] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x11e) returned 0x35166c0
	[0123.300] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040380 | out: hHeap=0x5f0000) returned 1
	[0123.300] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\xuQu0xo7-rgClLtX\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\xuqu0xo7-rgclltx\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0123.336] WriteFile (in: hFile=0x3ec, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6deb4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6deb4*=0x512, lpOverlapped=0x0) returned 1
	[0123.340] CloseHandle (hObject=0x3ec) returned 1
	[0123.341] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0123.341] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0123.341] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x40402b8 | out: hHeap=0x5f0000) returned 1
	[0123.341] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4081a80 | out: hHeap=0x5f0000) returned 1
	[0123.341] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x598b0fb0, ftCreationTime.dwHighDateTime=0x1d5e38c, ftLastAccessTime.dwLowDateTime=0x87703460, ftLastAccessTime.dwHighDateTime=0x1d5e2a0, ftLastWriteTime.dwLowDateTime=0x87703460, ftLastWriteTime.dwHighDateTime=0x1d5e2a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xuqu0xo7-rgclltx", cAlternateFileName="XUQU0X~1")) returned 0
	[0123.341] FindClose (in: hFindFile=0x61ea50 | out: hFindFile=0x61ea50) returned 1
	[0123.342] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0123.342] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0123.342] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xee) returned 0x351fec8
	[0123.342] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0123.342] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\uN fiEdAHo0VBfS4emS\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\un fiedaho0vbfs4ems\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0123.342] WriteFile (in: hFile=0x3e0, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e1e4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e1e4*=0x512, lpOverlapped=0x0) returned 1
	[0123.343] CloseHandle (hObject=0x3e0) returned 1
	[0123.344] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0123.344] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0123.344] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0123.344] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0123.344] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4bb1720, ftCreationTime.dwHighDateTime=0x1d5e5e1, ftLastAccessTime.dwLowDateTime=0xd0d17320, ftLastAccessTime.dwHighDateTime=0x1d5e3b9, ftLastWriteTime.dwLowDateTime=0xd0d17320, ftLastWriteTime.dwHighDateTime=0x1d5e3b9, nFileSizeHigh=0x0, nFileSizeLow=0xc242, dwReserved0=0x0, dwReserved1=0x0, cFileName="XnDn.avi", cAlternateFileName="")) returned 1
	[0123.344] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0123.344] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0123.344] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0123.344] StrStrW (lpFirst="xndn.avi", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.344] StrStrW (lpFirst="xndn.avi", lpSrch="ntldr") returned 0x0
	[0123.344] StrStrW (lpFirst="xndn.avi", lpSrch="pagefile.sys") returned 0x0
	[0123.344] StrStrW (lpFirst="xndn.avi", lpSrch="ntdetect.com") returned 0x0
	[0123.344] StrStrW (lpFirst="xndn.avi", lpSrch="autoexec.bat") returned 0x0
	[0123.344] StrStrW (lpFirst="xndn.avi", lpSrch="desktop.ini") returned 0x0
	[0123.344] StrStrW (lpFirst="xndn.avi", lpSrch="autorun.inf") returned 0x0
	[0123.344] StrStrW (lpFirst="xndn.avi", lpSrch="ntuser.dat") returned 0x0
	[0123.345] StrStrW (lpFirst="xndn.avi", lpSrch="iconcache.db") returned 0x0
	[0123.345] StrStrW (lpFirst="xndn.avi", lpSrch="bootsect.bak") returned 0x0
	[0123.345] StrStrW (lpFirst="xndn.avi", lpSrch="boot.ini") returned 0x0
	[0123.345] StrStrW (lpFirst="xndn.avi", lpSrch="bootfont.bin") returned 0x0
	[0123.345] StrStrW (lpFirst="xndn.avi", lpSrch="config.sys") returned 0x0
	[0123.345] StrStrW (lpFirst="xndn.avi", lpSrch="io.sys") returned 0x0
	[0123.345] StrStrW (lpFirst="xndn.avi", lpSrch="msdos.sys") returned 0x0
	[0123.345] StrStrW (lpFirst="xndn.avi", lpSrch="ntuser.dat.log") returned 0x0
	[0123.345] StrStrW (lpFirst="xndn.avi", lpSrch="thumbs.db") returned 0x0
	[0123.345] StrStrW (lpFirst="xndn.avi", lpSrch="swapfile.sys") returned 0x0
	[0123.345] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\XnDn.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\xndn.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0123.345] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=49730) returned 1
	[0123.345] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.345] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.360] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0123.360] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351b4e8
	[0123.360] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0123.361] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0123.361] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.361] ReadFile (in: hFile=0x3e0, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.370] GetLastError () returned 0x3e5
	[0123.370] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0123.370] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4bb1720, ftCreationTime.dwHighDateTime=0x1d5e5e1, ftLastAccessTime.dwLowDateTime=0xd0d17320, ftLastAccessTime.dwHighDateTime=0x1d5e3b9, ftLastWriteTime.dwLowDateTime=0xd0d17320, ftLastWriteTime.dwHighDateTime=0x1d5e3b9, nFileSizeHigh=0x0, nFileSizeLow=0xc242, dwReserved0=0x0, dwReserved1=0x0, cFileName="xndn.avi", cAlternateFileName="")) returned 0
	[0123.370] FindClose (in: hFindFile=0x61e950 | out: hFindFile=0x61e950) returned 1
	[0123.370] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0123.370] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0123.370] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xbe) returned 0x4040060
	[0123.370] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0123.371] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\jilWiA8_jW\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\jilwia8_jw\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0123.371] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e514, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e514*=0x512, lpOverlapped=0x0) returned 1
	[0123.373] CloseHandle (hObject=0x3d8) returned 1
	[0123.373] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4040060 | out: hHeap=0x5f0000) returned 1
	[0123.373] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0123.373] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633220 | out: hHeap=0x5f0000) returned 1
	[0123.373] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0123.373] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39adac50, ftCreationTime.dwHighDateTime=0x1d5de2f, ftLastAccessTime.dwLowDateTime=0x5ab9f170, ftLastAccessTime.dwHighDateTime=0x1d5e76b, ftLastWriteTime.dwLowDateTime=0x5ab9f170, ftLastWriteTime.dwHighDateTime=0x1d5e76b, nFileSizeHigh=0x0, nFileSizeLow=0x1554a, dwReserved0=0x0, dwReserved1=0x0, cFileName="qybdYBQm.swf", cAlternateFileName="")) returned 1
	[0123.373] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0123.373] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0123.373] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="ntldr") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="pagefile.sys") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="ntdetect.com") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="autoexec.bat") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="desktop.ini") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="autorun.inf") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="ntuser.dat") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="iconcache.db") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="bootsect.bak") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="boot.ini") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="bootfont.bin") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="config.sys") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="io.sys") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="msdos.sys") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="ntuser.dat.log") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="thumbs.db") returned 0x0
	[0123.374] StrStrW (lpFirst="qybdybqm.swf", lpSrch="swapfile.sys") returned 0x0
	[0123.374] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\qybdYBQm.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\qybdybqm.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0123.375] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=87370) returned 1
	[0123.375] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.375] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.387] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0123.388] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351b4e8
	[0123.388] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0123.389] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0123.389] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.389] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.399] GetLastError () returned 0x3e5
	[0123.399] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0123.399] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb25860, ftCreationTime.dwHighDateTime=0x1d5e17c, ftLastAccessTime.dwLowDateTime=0x5230dc60, ftLastAccessTime.dwHighDateTime=0x1d5e600, ftLastWriteTime.dwLowDateTime=0x5230dc60, ftLastWriteTime.dwHighDateTime=0x1d5e600, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zrrI 8P", cAlternateFileName="ZRRI8P~1")) returned 1
	[0123.399] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0123.399] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0123.399] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0123.399] lstrcmpW (lpString1="..", lpString2="zrrI 8P") returned -1
	[0123.399] lstrcmpW (lpString1=".", lpString2="zrrI 8P") returned -1
	[0123.399] StrStrW (lpFirst="zrri 8p", lpSrch="programdata") returned 0x0
	[0123.399] StrStrW (lpFirst="zrri 8p", lpSrch="$recycle.bin") returned 0x0
	[0123.399] StrStrW (lpFirst="zrri 8p", lpSrch="program files") returned 0x0
	[0123.399] StrStrW (lpFirst="zrri 8p", lpSrch="windows") returned 0x0
	[0123.399] StrStrW (lpFirst="zrri 8p", lpSrch="all users") returned 0x0
	[0123.399] StrStrW (lpFirst="zrri 8p", lpSrch="winnt") returned 0x0
	[0123.399] StrStrW (lpFirst="zrri 8p", lpSrch="appdata") returned 0x0
	[0123.399] StrStrW (lpFirst="zrri 8p", lpSrch="application data") returned 0x0
	[0123.399] StrStrW (lpFirst="zrri 8p", lpSrch="local settings") returned 0x0
	[0123.399] StrStrW (lpFirst="zrri 8p", lpSrch="boot") returned 0x0
	[0123.399] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0123.399] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0123.399] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\*", lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb25860, ftCreationTime.dwHighDateTime=0x1d5e17c, ftLastAccessTime.dwLowDateTime=0x5230dc60, ftLastAccessTime.dwHighDateTime=0x1d5e600, ftLastWriteTime.dwLowDateTime=0x5230dc60, ftLastWriteTime.dwHighDateTime=0x1d5e600, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e950
	[0123.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x633110 | out: hHeap=0x5f0000) returned 1
	[0123.400] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0123.400] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x3517098
	[0123.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0123.400] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.400] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0123.400] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb25860, ftCreationTime.dwHighDateTime=0x1d5e17c, ftLastAccessTime.dwLowDateTime=0x5230dc60, ftLastAccessTime.dwHighDateTime=0x1d5e600, ftLastWriteTime.dwLowDateTime=0x5230dc60, ftLastWriteTime.dwHighDateTime=0x1d5e600, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.400] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0123.400] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x3517098
	[0123.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0123.400] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0123.400] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea43f5b0, ftCreationTime.dwHighDateTime=0x1d5daf6, ftLastAccessTime.dwLowDateTime=0x647ef450, ftLastAccessTime.dwHighDateTime=0x1d5d8f0, ftLastWriteTime.dwLowDateTime=0x647ef450, ftLastWriteTime.dwHighDateTime=0x1d5d8f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3T__R4XLuWVp_", cAlternateFileName="3T__R4~1")) returned 1
	[0123.400] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0123.400] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x3517098
	[0123.400] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0123.400] lstrcmpW (lpString1="..", lpString2="3T__R4XLuWVp_") returned -1
	[0123.400] lstrcmpW (lpString1=".", lpString2="3T__R4XLuWVp_") returned -1
	[0123.400] StrStrW (lpFirst="3t__r4xluwvp_", lpSrch="programdata") returned 0x0
	[0123.400] StrStrW (lpFirst="3t__r4xluwvp_", lpSrch="$recycle.bin") returned 0x0
	[0123.401] StrStrW (lpFirst="3t__r4xluwvp_", lpSrch="program files") returned 0x0
	[0123.401] StrStrW (lpFirst="3t__r4xluwvp_", lpSrch="windows") returned 0x0
	[0123.401] StrStrW (lpFirst="3t__r4xluwvp_", lpSrch="all users") returned 0x0
	[0123.401] StrStrW (lpFirst="3t__r4xluwvp_", lpSrch="winnt") returned 0x0
	[0123.401] StrStrW (lpFirst="3t__r4xluwvp_", lpSrch="appdata") returned 0x0
	[0123.401] StrStrW (lpFirst="3t__r4xluwvp_", lpSrch="application data") returned 0x0
	[0123.401] StrStrW (lpFirst="3t__r4xluwvp_", lpSrch="local settings") returned 0x0
	[0123.401] StrStrW (lpFirst="3t__r4xluwvp_", lpSrch="boot") returned 0x0
	[0123.401] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0123.401] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0123.401] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\*", lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea43f5b0, ftCreationTime.dwHighDateTime=0x1d5daf6, ftLastAccessTime.dwLowDateTime=0x647ef450, ftLastAccessTime.dwHighDateTime=0x1d5d8f0, ftLastWriteTime.dwLowDateTime=0x647ef450, ftLastWriteTime.dwHighDateTime=0x1d5d8f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea50
	[0123.401] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0123.401] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0123.401] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.401] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.401] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0123.401] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea43f5b0, ftCreationTime.dwHighDateTime=0x1d5daf6, ftLastAccessTime.dwLowDateTime=0x647ef450, ftLastAccessTime.dwHighDateTime=0x1d5d8f0, ftLastWriteTime.dwLowDateTime=0x647ef450, ftLastWriteTime.dwHighDateTime=0x1d5d8f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.401] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0123.401] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.402] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0123.402] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdca42ce0, ftCreationTime.dwHighDateTime=0x1d5dc7c, ftLastAccessTime.dwLowDateTime=0x31230ca0, ftLastAccessTime.dwHighDateTime=0x1d5df61, ftLastWriteTime.dwLowDateTime=0x31230ca0, ftLastWriteTime.dwHighDateTime=0x1d5df61, nFileSizeHigh=0x0, nFileSizeLow=0x589c, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ivn6VXEvHX0K7b.avi", cAlternateFileName="5IVN6V~1.AVI")) returned 1
	[0123.402] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0123.402] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x351fec8
	[0123.402] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="ntldr") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="pagefile.sys") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="ntdetect.com") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="autoexec.bat") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="desktop.ini") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="autorun.inf") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="ntuser.dat") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="iconcache.db") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="bootsect.bak") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="boot.ini") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="bootfont.bin") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="config.sys") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="io.sys") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="msdos.sys") returned 0x0
	[0123.402] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="ntuser.dat.log") returned 0x0
	[0123.403] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="thumbs.db") returned 0x0
	[0123.403] StrStrW (lpFirst="5ivn6vxevhx0k7b.avi", lpSrch="swapfile.sys") returned 0x0
	[0123.403] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\5ivn6VXEvHX0K7b.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\5ivn6vxevhx0k7b.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0123.403] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=22684) returned 1
	[0123.404] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.404] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.416] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x4040060
	[0123.416] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351aac8
	[0123.416] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0123.417] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0123.417] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.417] ReadFile (in: hFile=0x3ec, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0123.428] GetLastError () returned 0x3e5
	[0123.428] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0123.428] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8569c60, ftCreationTime.dwHighDateTime=0x1d5e05a, ftLastAccessTime.dwLowDateTime=0x9aebdad0, ftLastAccessTime.dwHighDateTime=0x1d5dedb, ftLastWriteTime.dwLowDateTime=0x9aebdad0, ftLastWriteTime.dwHighDateTime=0x1d5dedb, nFileSizeHigh=0x0, nFileSizeLow=0x141ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="RG7Nc.avi", cAlternateFileName="")) returned 1
	[0123.428] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0123.428] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x35166c0
	[0123.428] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0123.428] StrStrW (lpFirst="rg7nc.avi", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.428] StrStrW (lpFirst="rg7nc.avi", lpSrch="ntldr") returned 0x0
	[0123.428] StrStrW (lpFirst="rg7nc.avi", lpSrch="pagefile.sys") returned 0x0
	[0123.428] StrStrW (lpFirst="rg7nc.avi", lpSrch="ntdetect.com") returned 0x0
	[0123.428] StrStrW (lpFirst="rg7nc.avi", lpSrch="autoexec.bat") returned 0x0
	[0123.428] StrStrW (lpFirst="rg7nc.avi", lpSrch="desktop.ini") returned 0x0
	[0123.428] StrStrW (lpFirst="rg7nc.avi", lpSrch="autorun.inf") returned 0x0
	[0123.429] StrStrW (lpFirst="rg7nc.avi", lpSrch="ntuser.dat") returned 0x0
	[0123.429] StrStrW (lpFirst="rg7nc.avi", lpSrch="iconcache.db") returned 0x0
	[0123.429] StrStrW (lpFirst="rg7nc.avi", lpSrch="bootsect.bak") returned 0x0
	[0123.429] StrStrW (lpFirst="rg7nc.avi", lpSrch="boot.ini") returned 0x0
	[0123.429] StrStrW (lpFirst="rg7nc.avi", lpSrch="bootfont.bin") returned 0x0
	[0123.429] StrStrW (lpFirst="rg7nc.avi", lpSrch="config.sys") returned 0x0
	[0123.429] StrStrW (lpFirst="rg7nc.avi", lpSrch="io.sys") returned 0x0
	[0123.429] StrStrW (lpFirst="rg7nc.avi", lpSrch="msdos.sys") returned 0x0
	[0123.429] StrStrW (lpFirst="rg7nc.avi", lpSrch="ntuser.dat.log") returned 0x0
	[0123.429] StrStrW (lpFirst="rg7nc.avi", lpSrch="thumbs.db") returned 0x0
	[0123.429] StrStrW (lpFirst="rg7nc.avi", lpSrch="swapfile.sys") returned 0x0
	[0123.429] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\RG7Nc.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\rg7nc.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x378
	[0123.429] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=82362) returned 1
	[0123.429] CreateIoCompletionPort (FileHandle=0x378, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.429] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.443] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0123.443] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0123.443] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0123.444] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0123.444] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.445] ReadFile (in: hFile=0x378, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0123.446] GetLastError () returned 0x3e5
	[0123.446] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0123.446] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1274b60, ftCreationTime.dwHighDateTime=0x1d5e3f3, ftLastAccessTime.dwLowDateTime=0x75ebbb20, ftLastAccessTime.dwHighDateTime=0x1d5e164, ftLastWriteTime.dwLowDateTime=0x75ebbb20, ftLastWriteTime.dwHighDateTime=0x1d5e164, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROtrMwa4DrpBY.mp4", cAlternateFileName="ROTRMW~1.MP4")) returned 1
	[0123.446] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0123.446] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x35166c0
	[0123.446] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0123.446] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.446] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="ntldr") returned 0x0
	[0123.446] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="pagefile.sys") returned 0x0
	[0123.446] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="ntdetect.com") returned 0x0
	[0123.446] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="autoexec.bat") returned 0x0
	[0123.446] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="desktop.ini") returned 0x0
	[0123.446] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="autorun.inf") returned 0x0
	[0123.446] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="ntuser.dat") returned 0x0
	[0123.446] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="iconcache.db") returned 0x0
	[0123.446] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="bootsect.bak") returned 0x0
	[0123.446] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="boot.ini") returned 0x0
	[0123.447] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="bootfont.bin") returned 0x0
	[0123.447] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="config.sys") returned 0x0
	[0123.447] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="io.sys") returned 0x0
	[0123.447] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="msdos.sys") returned 0x0
	[0123.447] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0123.447] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="thumbs.db") returned 0x0
	[0123.447] StrStrW (lpFirst="rotrmwa4drpby.mp4", lpSrch="swapfile.sys") returned 0x0
	[0123.447] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\ROtrMwa4DrpBY.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\rotrmwa4drpby.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0123.447] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=44960) returned 1
	[0123.447] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.447] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0123.461] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522fb8
	[0123.461] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0123.461] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0123.462] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0123.462] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.462] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0123.472] GetLastError () returned 0x3e5
	[0123.472] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0123.472] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f66af0, ftCreationTime.dwHighDateTime=0x1d5e0ff, ftLastAccessTime.dwLowDateTime=0x6b7b77b0, ftLastAccessTime.dwHighDateTime=0x1d5dfc6, ftLastWriteTime.dwLowDateTime=0x6b7b77b0, ftLastWriteTime.dwHighDateTime=0x1d5dfc6, nFileSizeHigh=0x0, nFileSizeLow=0xa491, dwReserved0=0x0, dwReserved1=0x0, cFileName="tQP3AdhgtIEyFdgGovq.flv", cAlternateFileName="TQP3AD~1.FLV")) returned 1
	[0123.472] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0123.472] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x35166c0
	[0123.472] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0123.472] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.472] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="ntldr") returned 0x0
	[0123.472] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="pagefile.sys") returned 0x0
	[0123.472] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="ntdetect.com") returned 0x0
	[0123.472] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="autoexec.bat") returned 0x0
	[0123.472] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="desktop.ini") returned 0x0
	[0123.472] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="autorun.inf") returned 0x0
	[0123.472] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="ntuser.dat") returned 0x0
	[0123.472] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="iconcache.db") returned 0x0
	[0123.472] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="bootsect.bak") returned 0x0
	[0123.472] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="boot.ini") returned 0x0
	[0123.473] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="bootfont.bin") returned 0x0
	[0123.473] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="config.sys") returned 0x0
	[0123.473] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="io.sys") returned 0x0
	[0123.473] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="msdos.sys") returned 0x0
	[0123.473] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="ntuser.dat.log") returned 0x0
	[0123.473] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="thumbs.db") returned 0x0
	[0123.473] StrStrW (lpFirst="tqp3adhgtieyfdggovq.flv", lpSrch="swapfile.sys") returned 0x0
	[0123.473] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\tQP3AdhgtIEyFdgGovq.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\tqp3adhgtieyfdggovq.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0123.473] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e128 | out: lpFileSize=0x3f6e128*=42129) returned 1
	[0123.473] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.473] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0123.487] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xc0) returned 0x40402b8
	[0123.487] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0123.487] CryptAcquireContextW (in: phProv=0x3f6ddfc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6ddfc*=0x633110) returned 1
	[0123.542] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6de10 | out: pbBuffer=0x3f6de10) returned 1
	[0123.542] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.542] ReadFile (in: hFile=0x3ec, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0123.551] GetLastError () returned 0x3e5
	[0123.551] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0123.551] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe882170, ftCreationTime.dwHighDateTime=0x1d5de9a, ftLastAccessTime.dwLowDateTime=0x5f3fefa0, ftLastAccessTime.dwHighDateTime=0x1d5e406, ftLastWriteTime.dwLowDateTime=0x5f3fefa0, ftLastWriteTime.dwHighDateTime=0x1d5e406, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xr_qxq-v0b", cAlternateFileName="XR_QXQ~1")) returned 1
	[0123.551] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0123.551] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x35166c0
	[0123.551] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0123.551] lstrcmpW (lpString1="..", lpString2="Xr_qxq-v0b") returned -1
	[0123.551] lstrcmpW (lpString1=".", lpString2="Xr_qxq-v0b") returned -1
	[0123.551] StrStrW (lpFirst="xr_qxq-v0b", lpSrch="programdata") returned 0x0
	[0123.551] StrStrW (lpFirst="xr_qxq-v0b", lpSrch="$recycle.bin") returned 0x0
	[0123.551] StrStrW (lpFirst="xr_qxq-v0b", lpSrch="program files") returned 0x0
	[0123.551] StrStrW (lpFirst="xr_qxq-v0b", lpSrch="windows") returned 0x0
	[0123.551] StrStrW (lpFirst="xr_qxq-v0b", lpSrch="all users") returned 0x0
	[0123.552] StrStrW (lpFirst="xr_qxq-v0b", lpSrch="winnt") returned 0x0
	[0123.552] StrStrW (lpFirst="xr_qxq-v0b", lpSrch="appdata") returned 0x0
	[0123.552] StrStrW (lpFirst="xr_qxq-v0b", lpSrch="application data") returned 0x0
	[0123.552] StrStrW (lpFirst="xr_qxq-v0b", lpSrch="local settings") returned 0x0
	[0123.552] StrStrW (lpFirst="xr_qxq-v0b", lpSrch="boot") returned 0x0
	[0123.552] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0123.552] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0123.552] FindFirstFileW (in: lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\Xr_qxq-v0b\\*", lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe882170, ftCreationTime.dwHighDateTime=0x1d5de9a, ftLastAccessTime.dwLowDateTime=0x5f3fefa0, ftLastAccessTime.dwHighDateTime=0x1d5e406, ftLastWriteTime.dwLowDateTime=0x5f3fefa0, ftLastWriteTime.dwHighDateTime=0x1d5e406, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e990
	[0123.552] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0123.552] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0123.552] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.552] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.553] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0123.553] FindNextFileW (in: hFindFile=0x61e990, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe882170, ftCreationTime.dwHighDateTime=0x1d5de9a, ftLastAccessTime.dwLowDateTime=0x5f3fefa0, ftLastAccessTime.dwHighDateTime=0x1d5e406, ftLastWriteTime.dwLowDateTime=0x5f3fefa0, ftLastWriteTime.dwHighDateTime=0x1d5e406, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.553] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0123.553] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.553] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0123.553] FindNextFileW (in: hFindFile=0x61e990, lpFindFileData=0x3f6ded0 | out: lpFindFileData=0x3f6ded0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe882170, ftCreationTime.dwHighDateTime=0x1d5de9a, ftLastAccessTime.dwLowDateTime=0x5f3fefa0, ftLastAccessTime.dwHighDateTime=0x1d5e406, ftLastWriteTime.dwLowDateTime=0x5f3fefa0, ftLastWriteTime.dwHighDateTime=0x1d5e406, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0123.553] FindClose (in: hFindFile=0x61e990 | out: hFindFile=0x61e990) returned 1
	[0123.553] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0123.553] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xb0) returned 0x3522f00
	[0123.553] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x106) returned 0x351fec8
	[0123.553] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3522f00 | out: hHeap=0x5f0000) returned 1
	[0123.553] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\Xr_qxq-v0b\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\xr_qxq-v0b\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3ec
	[0123.554] WriteFile (in: hFile=0x3ec, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6deb4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6deb4*=0x512, lpOverlapped=0x0) returned 1
	[0123.597] CloseHandle (hObject=0x3ec) returned 1
	[0123.597] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x351fec8 | out: hHeap=0x5f0000) returned 1
	[0123.597] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0123.597] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643e50 | out: hHeap=0x5f0000) returned 1
	[0123.597] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0123.598] FindNextFileW (in: hFindFile=0x61ea50, lpFindFileData=0x3f6e200 | out: lpFindFileData=0x3f6e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe882170, ftCreationTime.dwHighDateTime=0x1d5de9a, ftLastAccessTime.dwLowDateTime=0x5f3fefa0, ftLastAccessTime.dwHighDateTime=0x1d5e406, ftLastWriteTime.dwLowDateTime=0x5f3fefa0, ftLastWriteTime.dwHighDateTime=0x1d5e406, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xr_qxq-v0b", cAlternateFileName="XR_QXQ~1")) returned 0
	[0123.598] FindClose (in: hFindFile=0x61ea50 | out: hFindFile=0x61ea50) returned 1
	[0123.598] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0123.598] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0123.598] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xd6) returned 0x35166c0
	[0123.598] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639c38 | out: hHeap=0x5f0000) returned 1
	[0123.598] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\3T__R4XLuWVp_\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\3t__r4xluwvp_\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3e0
	[0123.599] WriteFile (in: hFile=0x3e0, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e1e4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e1e4*=0x512, lpOverlapped=0x0) returned 1
	[0123.600] CloseHandle (hObject=0x3e0) returned 1
	[0123.600] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35166c0 | out: hHeap=0x5f0000) returned 1
	[0123.600] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0123.600] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x63a0f8 | out: hHeap=0x5f0000) returned 1
	[0123.600] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0123.600] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23a29e30, ftCreationTime.dwHighDateTime=0x1d5e7e3, ftLastAccessTime.dwLowDateTime=0xfc9191a0, ftLastAccessTime.dwHighDateTime=0x1d5dcfe, ftLastWriteTime.dwLowDateTime=0xfc9191a0, ftLastWriteTime.dwHighDateTime=0x1d5dcfe, nFileSizeHigh=0x0, nFileSizeLow=0x173bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="hIdF485eJOBzjY.avi", cAlternateFileName="HIDF48~1.AVI")) returned 1
	[0123.600] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0123.600] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x3517098
	[0123.600] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="ntldr") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="pagefile.sys") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="ntdetect.com") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="autoexec.bat") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="desktop.ini") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="autorun.inf") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="ntuser.dat") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="iconcache.db") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="bootsect.bak") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="boot.ini") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="bootfont.bin") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="config.sys") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="io.sys") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="msdos.sys") returned 0x0
	[0123.601] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="ntuser.dat.log") returned 0x0
	[0123.602] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="thumbs.db") returned 0x0
	[0123.602] StrStrW (lpFirst="hidf485ejobzjy.avi", lpSrch="swapfile.sys") returned 0x0
	[0123.602] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\hIdF485eJOBzjY.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\hidf485ejobzjy.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0123.602] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=95163) returned 1
	[0123.602] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.602] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0123.616] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643e50
	[0123.616] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0123.616] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0123.617] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0123.617] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.617] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0123.703] GetLastError () returned 0x3e5
	[0123.703] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0123.703] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafb0bbd0, ftCreationTime.dwHighDateTime=0x1d5e1f5, ftLastAccessTime.dwLowDateTime=0xa35e81e0, ftLastAccessTime.dwHighDateTime=0x1d5ddfa, ftLastWriteTime.dwLowDateTime=0xa35e81e0, ftLastWriteTime.dwHighDateTime=0x1d5ddfa, nFileSizeHigh=0x0, nFileSizeLow=0xd1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pmu0Y.flv", cAlternateFileName="")) returned 1
	[0123.703] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0123.703] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x3517098
	[0123.703] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="ntldr") returned 0x0
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="pagefile.sys") returned 0x0
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="ntdetect.com") returned 0x0
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="autoexec.bat") returned 0x0
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="desktop.ini") returned 0x0
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="autorun.inf") returned 0x0
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="ntuser.dat") returned 0x0
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="iconcache.db") returned 0x0
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="bootsect.bak") returned 0x0
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="boot.ini") returned 0x0
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="bootfont.bin") returned 0x0
	[0123.703] StrStrW (lpFirst="pmu0y.flv", lpSrch="config.sys") returned 0x0
	[0123.704] StrStrW (lpFirst="pmu0y.flv", lpSrch="io.sys") returned 0x0
	[0123.704] StrStrW (lpFirst="pmu0y.flv", lpSrch="msdos.sys") returned 0x0
	[0123.704] StrStrW (lpFirst="pmu0y.flv", lpSrch="ntuser.dat.log") returned 0x0
	[0123.704] StrStrW (lpFirst="pmu0y.flv", lpSrch="thumbs.db") returned 0x0
	[0123.704] StrStrW (lpFirst="pmu0y.flv", lpSrch="swapfile.sys") returned 0x0
	[0123.704] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\Pmu0Y.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\pmu0y.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0123.704] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=53702) returned 1
	[0123.704] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.704] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0123.725] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0123.725] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0123.725] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0123.726] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0123.726] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.727] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0123.744] GetLastError () returned 0x3e5
	[0123.744] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0123.744] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91a25160, ftCreationTime.dwHighDateTime=0x1d5dd6f, ftLastAccessTime.dwLowDateTime=0xc29e4d90, ftLastAccessTime.dwHighDateTime=0x1d5dfa5, ftLastWriteTime.dwLowDateTime=0xc29e4d90, ftLastWriteTime.dwHighDateTime=0x1d5dfa5, nFileSizeHigh=0x0, nFileSizeLow=0x1040c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHfYAp4iFTI.mkv", cAlternateFileName="RHFYAP~1.MKV")) returned 1
	[0123.744] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0123.744] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x3517098
	[0123.744] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="ntldr") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="pagefile.sys") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="ntdetect.com") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="autoexec.bat") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="desktop.ini") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="autorun.inf") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="ntuser.dat") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="iconcache.db") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="bootsect.bak") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="boot.ini") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="bootfont.bin") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="config.sys") returned 0x0
	[0123.744] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="io.sys") returned 0x0
	[0123.745] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="msdos.sys") returned 0x0
	[0123.745] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="ntuser.dat.log") returned 0x0
	[0123.745] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="thumbs.db") returned 0x0
	[0123.745] StrStrW (lpFirst="rhfyap4ifti.mkv", lpSrch="swapfile.sys") returned 0x0
	[0123.745] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\RHfYAp4iFTI.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\rhfyap4ifti.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x378
	[0123.745] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=66572) returned 1
	[0123.745] CreateIoCompletionPort (FileHandle=0x378, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.745] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.758] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0123.758] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0123.758] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0123.759] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0123.759] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.759] ReadFile (in: hFile=0x378, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0123.760] GetLastError () returned 0x3e5
	[0123.760] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0123.760] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77249120, ftCreationTime.dwHighDateTime=0x1d5e023, ftLastAccessTime.dwLowDateTime=0x33b6bc50, ftLastAccessTime.dwHighDateTime=0x1d5d8bd, ftLastWriteTime.dwLowDateTime=0x33b6bc50, ftLastWriteTime.dwHighDateTime=0x1d5d8bd, nFileSizeHigh=0x0, nFileSizeLow=0x1827f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SgVC1NERzDGqOHLP.mkv", cAlternateFileName="SGVC1N~1.MKV")) returned 1
	[0123.760] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0123.760] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x3517098
	[0123.760] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0123.760] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.760] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="ntldr") returned 0x0
	[0123.760] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="pagefile.sys") returned 0x0
	[0123.760] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="ntdetect.com") returned 0x0
	[0123.760] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="autoexec.bat") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="desktop.ini") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="autorun.inf") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="ntuser.dat") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="iconcache.db") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="bootsect.bak") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="boot.ini") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="bootfont.bin") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="config.sys") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="io.sys") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="msdos.sys") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="ntuser.dat.log") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="thumbs.db") returned 0x0
	[0123.761] StrStrW (lpFirst="sgvc1nerzdgqohlp.mkv", lpSrch="swapfile.sys") returned 0x0
	[0123.761] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\SgVC1NERzDGqOHLP.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\sgvc1nerzdgqohlp.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0123.762] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e458 | out: lpFileSize=0x3f6e458*=98943) returned 1
	[0123.762] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0123.776] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0123.776] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0123.776] CryptAcquireContextW (in: phProv=0x3f6e12c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e12c*=0x633110) returned 1
	[0123.777] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e140 | out: pbBuffer=0x3f6e140) returned 1
	[0123.777] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.777] ReadFile (in: hFile=0x3e0, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0123.788] GetLastError () returned 0x3e5
	[0123.788] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0123.789] FindNextFileW (in: hFindFile=0x61e950, lpFindFileData=0x3f6e530 | out: lpFindFileData=0x3f6e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77249120, ftCreationTime.dwHighDateTime=0x1d5e023, ftLastAccessTime.dwLowDateTime=0x33b6bc50, ftLastAccessTime.dwHighDateTime=0x1d5d8bd, ftLastWriteTime.dwLowDateTime=0x33b6bc50, ftLastWriteTime.dwHighDateTime=0x1d5d8bd, nFileSizeHigh=0x0, nFileSizeLow=0x1827f, dwReserved0=0x0, dwReserved1=0x0, cFileName="sgvc1nerzdgqohlp.mkv", cAlternateFileName="SGVC1N~1.MKV")) returned 0
	[0123.789] FindClose (in: hFindFile=0x61e950 | out: hFindFile=0x61e950) returned 1
	[0123.789] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0123.789] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0123.789] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa6) returned 0x3517098
	[0123.789] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0123.789] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\zrrI 8P\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\zrri 8p\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0123.789] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e514, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e514*=0x512, lpOverlapped=0x0) returned 1
	[0123.791] CloseHandle (hObject=0x3d8) returned 1
	[0123.791] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3517098 | out: hHeap=0x5f0000) returned 1
	[0123.791] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0123.791] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0123.791] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0123.791] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb25860, ftCreationTime.dwHighDateTime=0x1d5e17c, ftLastAccessTime.dwLowDateTime=0x5230dc60, ftLastAccessTime.dwHighDateTime=0x1d5e600, ftLastWriteTime.dwLowDateTime=0x5230dc60, ftLastWriteTime.dwHighDateTime=0x1d5e600, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zrri 8p", cAlternateFileName="ZRRI8P~1")) returned 0
	[0123.791] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0123.792] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0123.792] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0123.792] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0123.792] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0123.792] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3Sh28JSd\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3sh28jsd\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0123.792] WriteFile (in: hFile=0x3dc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0123.793] CloseHandle (hObject=0x3dc) returned 1
	[0123.794] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0123.794] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0123.794] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0123.794] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0123.794] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e9146b0, ftCreationTime.dwHighDateTime=0x1d5e0d8, ftLastAccessTime.dwLowDateTime=0x28f07b70, ftLastAccessTime.dwHighDateTime=0x1d5db16, ftLastWriteTime.dwLowDateTime=0x28f07b70, ftLastWriteTime.dwHighDateTime=0x1d5db16, nFileSizeHigh=0x0, nFileSizeLow=0x7f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSnV-.mp4", cAlternateFileName="")) returned 1
	[0123.794] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0123.794] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0123.794] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0123.794] StrStrW (lpFirst="bsnv-.mp4", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.794] StrStrW (lpFirst="bsnv-.mp4", lpSrch="ntldr") returned 0x0
	[0123.794] StrStrW (lpFirst="bsnv-.mp4", lpSrch="pagefile.sys") returned 0x0
	[0123.794] StrStrW (lpFirst="bsnv-.mp4", lpSrch="ntdetect.com") returned 0x0
	[0123.794] StrStrW (lpFirst="bsnv-.mp4", lpSrch="autoexec.bat") returned 0x0
	[0123.794] StrStrW (lpFirst="bsnv-.mp4", lpSrch="desktop.ini") returned 0x0
	[0123.795] StrStrW (lpFirst="bsnv-.mp4", lpSrch="autorun.inf") returned 0x0
	[0123.795] StrStrW (lpFirst="bsnv-.mp4", lpSrch="ntuser.dat") returned 0x0
	[0123.795] StrStrW (lpFirst="bsnv-.mp4", lpSrch="iconcache.db") returned 0x0
	[0123.795] StrStrW (lpFirst="bsnv-.mp4", lpSrch="bootsect.bak") returned 0x0
	[0123.795] StrStrW (lpFirst="bsnv-.mp4", lpSrch="boot.ini") returned 0x0
	[0123.795] StrStrW (lpFirst="bsnv-.mp4", lpSrch="bootfont.bin") returned 0x0
	[0123.795] StrStrW (lpFirst="bsnv-.mp4", lpSrch="config.sys") returned 0x0
	[0123.795] StrStrW (lpFirst="bsnv-.mp4", lpSrch="io.sys") returned 0x0
	[0123.795] StrStrW (lpFirst="bsnv-.mp4", lpSrch="msdos.sys") returned 0x0
	[0123.795] StrStrW (lpFirst="bsnv-.mp4", lpSrch="ntuser.dat.log") returned 0x0
	[0123.795] StrStrW (lpFirst="bsnv-.mp4", lpSrch="thumbs.db") returned 0x0
	[0123.795] StrStrW (lpFirst="bsnv-.mp4", lpSrch="swapfile.sys") returned 0x0
	[0123.795] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\BSnV-.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\bsnv-.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0123.795] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=32532) returned 1
	[0123.796] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.796] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0123.810] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0123.810] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0123.810] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0123.811] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0123.811] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.811] ReadFile (in: hFile=0x3dc, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0123.820] GetLastError () returned 0x3e5
	[0123.820] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0123.820] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0123.820] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0123.820] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0123.820] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0123.820] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.820] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0123.820] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0123.820] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0123.820] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0123.820] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0123.820] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0123.820] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0123.820] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0123.821] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0123.821] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0123.821] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0123.821] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0123.821] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x378
	[0123.833] WriteFile (in: hFile=0x378, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0123.834] CloseHandle (hObject=0x378) returned 1
	[0123.837] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0123.837] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0123.837] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0123.837] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0123.837] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdc3faa40, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc3faa40, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="videos", cAlternateFileName="")) returned 0
	[0123.837] FindClose (in: hFindFile=0x61e910 | out: hFindFile=0x61e910) returned 1
	[0123.838] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0123.838] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665920
	[0123.838] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0123.838] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665920 | out: hHeap=0x5f0000) returned 1
	[0123.838] CreateFileW (lpFileName="C:\\\\Users\\5p5NrGJn0jS HALPmcxz\\read_me_lkdtt.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3a4
	[0123.839] WriteFile (in: hFile=0x3a4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eea4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eea4*=0x512, lpOverlapped=0x0) returned 1
	[0123.842] CloseHandle (hObject=0x3a4) returned 1
	[0123.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0123.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0123.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0123.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0123.843] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x16000016, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0123.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0123.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0123.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0123.843] lstrcmpW (lpString1="..", lpString2="All Users") returned -1
	[0123.843] lstrcmpW (lpString1=".", lpString2="All Users") returned -1
	[0123.843] StrStrW (lpFirst="all users", lpSrch="programdata") returned 0x0
	[0123.843] StrStrW (lpFirst="all users", lpSrch="$recycle.bin") returned 0x0
	[0123.843] StrStrW (lpFirst="all users", lpSrch="program files") returned 0x0
	[0123.843] StrStrW (lpFirst="all users", lpSrch="windows") returned 0x0
	[0123.843] StrStrW (lpFirst="all users", lpSrch="all users") returned="all users"
	[0123.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0123.843] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x16000016, cFileName="Default", cAlternateFileName="")) returned 1
	[0123.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0123.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0123.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0123.843] lstrcmpW (lpString1="..", lpString2="Default") returned -1
	[0123.843] lstrcmpW (lpString1=".", lpString2="Default") returned -1
	[0123.844] StrStrW (lpFirst="default", lpSrch="programdata") returned 0x0
	[0123.844] StrStrW (lpFirst="default", lpSrch="$recycle.bin") returned 0x0
	[0123.844] StrStrW (lpFirst="default", lpSrch="program files") returned 0x0
	[0123.844] StrStrW (lpFirst="default", lpSrch="windows") returned 0x0
	[0123.844] StrStrW (lpFirst="default", lpSrch="all users") returned 0x0
	[0123.844] StrStrW (lpFirst="default", lpSrch="winnt") returned 0x0
	[0123.844] StrStrW (lpFirst="default", lpSrch="appdata") returned 0x0
	[0123.844] StrStrW (lpFirst="default", lpSrch="application data") returned 0x0
	[0123.844] StrStrW (lpFirst="default", lpSrch="local settings") returned 0x0
	[0123.844] StrStrW (lpFirst="default", lpSrch="boot") returned 0x0
	[0123.844] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0123.844] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0123.844] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\*", lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e910
	[0123.844] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0123.844] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0123.845] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.845] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.845] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0123.845] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.845] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0123.845] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.845] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0123.845] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0123.845] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0123.845] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0123.845] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0123.845] lstrcmpW (lpString1="..", lpString2="AppData") returned -1
	[0123.845] lstrcmpW (lpString1=".", lpString2="AppData") returned -1
	[0123.845] StrStrW (lpFirst="appdata", lpSrch="programdata") returned 0x0
	[0123.845] StrStrW (lpFirst="appdata", lpSrch="$recycle.bin") returned 0x0
	[0123.845] StrStrW (lpFirst="appdata", lpSrch="program files") returned 0x0
	[0123.845] StrStrW (lpFirst="appdata", lpSrch="windows") returned 0x0
	[0123.845] StrStrW (lpFirst="appdata", lpSrch="all users") returned 0x0
	[0123.845] StrStrW (lpFirst="appdata", lpSrch="winnt") returned 0x0
	[0123.845] StrStrW (lpFirst="appdata", lpSrch="appdata") returned="appdata"
	[0123.845] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0123.845] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0123.846] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0123.846] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0123.846] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0123.846] lstrcmpW (lpString1="..", lpString2="Application Data") returned -1
	[0123.846] lstrcmpW (lpString1=".", lpString2="Application Data") returned -1
	[0123.846] StrStrW (lpFirst="application data", lpSrch="programdata") returned 0x0
	[0123.846] StrStrW (lpFirst="application data", lpSrch="$recycle.bin") returned 0x0
	[0123.846] StrStrW (lpFirst="application data", lpSrch="program files") returned 0x0
	[0123.846] StrStrW (lpFirst="application data", lpSrch="windows") returned 0x0
	[0123.846] StrStrW (lpFirst="application data", lpSrch="all users") returned 0x0
	[0123.846] StrStrW (lpFirst="application data", lpSrch="winnt") returned 0x0
	[0123.846] StrStrW (lpFirst="application data", lpSrch="appdata") returned 0x0
	[0123.846] StrStrW (lpFirst="application data", lpSrch="application data") returned="application data"
	[0123.846] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0123.846] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0123.846] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0123.846] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0123.846] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0123.846] lstrcmpW (lpString1="..", lpString2="Contacts") returned -1
	[0123.846] lstrcmpW (lpString1=".", lpString2="Contacts") returned -1
	[0123.846] StrStrW (lpFirst="contacts", lpSrch="programdata") returned 0x0
	[0123.847] StrStrW (lpFirst="contacts", lpSrch="$recycle.bin") returned 0x0
	[0123.847] StrStrW (lpFirst="contacts", lpSrch="program files") returned 0x0
	[0123.847] StrStrW (lpFirst="contacts", lpSrch="windows") returned 0x0
	[0123.847] StrStrW (lpFirst="contacts", lpSrch="all users") returned 0x0
	[0123.847] StrStrW (lpFirst="contacts", lpSrch="winnt") returned 0x0
	[0123.847] StrStrW (lpFirst="contacts", lpSrch="appdata") returned 0x0
	[0123.847] StrStrW (lpFirst="contacts", lpSrch="application data") returned 0x0
	[0123.847] StrStrW (lpFirst="contacts", lpSrch="local settings") returned 0x0
	[0123.847] StrStrW (lpFirst="contacts", lpSrch="boot") returned 0x0
	[0123.847] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0123.847] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0123.847] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Contacts\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0123.848] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0123.848] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0123.848] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0123.848] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0123.848] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0123.848] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.848] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0123.848] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0123.848] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0123.848] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
	[0123.848] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0123.848] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0123.848] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0123.848] StrStrW (lpFirst="administrator.contact", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.848] StrStrW (lpFirst="administrator.contact", lpSrch="ntldr") returned 0x0
	[0123.848] StrStrW (lpFirst="administrator.contact", lpSrch="pagefile.sys") returned 0x0
	[0123.848] StrStrW (lpFirst="administrator.contact", lpSrch="ntdetect.com") returned 0x0
	[0123.848] StrStrW (lpFirst="administrator.contact", lpSrch="autoexec.bat") returned 0x0
	[0123.848] StrStrW (lpFirst="administrator.contact", lpSrch="desktop.ini") returned 0x0
	[0123.848] StrStrW (lpFirst="administrator.contact", lpSrch="autorun.inf") returned 0x0
	[0123.848] StrStrW (lpFirst="administrator.contact", lpSrch="ntuser.dat") returned 0x0
	[0123.849] StrStrW (lpFirst="administrator.contact", lpSrch="iconcache.db") returned 0x0
	[0123.849] StrStrW (lpFirst="administrator.contact", lpSrch="bootsect.bak") returned 0x0
	[0123.849] StrStrW (lpFirst="administrator.contact", lpSrch="boot.ini") returned 0x0
	[0123.849] StrStrW (lpFirst="administrator.contact", lpSrch="bootfont.bin") returned 0x0
	[0123.849] StrStrW (lpFirst="administrator.contact", lpSrch="config.sys") returned 0x0
	[0123.849] StrStrW (lpFirst="administrator.contact", lpSrch="io.sys") returned 0x0
	[0123.849] StrStrW (lpFirst="administrator.contact", lpSrch="msdos.sys") returned 0x0
	[0123.849] StrStrW (lpFirst="administrator.contact", lpSrch="ntuser.dat.log") returned 0x0
	[0123.849] StrStrW (lpFirst="administrator.contact", lpSrch="thumbs.db") returned 0x0
	[0123.849] StrStrW (lpFirst="administrator.contact", lpSrch="swapfile.sys") returned 0x0
	[0123.849] CreateFileW (lpFileName="C:\\\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3bc
	[0123.850] GetFileSizeEx (in: hFile=0x3bc, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=68382) returned 1
	[0123.850] CreateIoCompletionPort (FileHandle=0x3bc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0123.850] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0123.863] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0123.863] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0123.863] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633110) returned 1
	[0123.864] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0123.864] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0123.864] ReadFile (in: hFile=0x3bc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0123.867] GetLastError () returned 0x3e5
	[0123.867] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526568 | out: hHeap=0x5f0000) returned 1
	[0123.867] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0123.867] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0123.867] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0123.867] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0123.867] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0123.867] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0123.867] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0123.867] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0123.867] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0123.867] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0123.867] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0123.867] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0123.867] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0123.867] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0123.867] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0123.868] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0123.868] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0123.868] CreateFileW (lpFileName="C:\\\\Users\\Default\\Contacts\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\contacts\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x378
	[0123.869] WriteFile (in: hFile=0x378, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0123.870] CloseHandle (hObject=0x378) returned 1
	[0123.870] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0123.870] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0123.870] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0123.870] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0123.870] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0123.870] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0123.870] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0123.870] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0123.870] lstrcmpW (lpString1="..", lpString2="Cookies") returned -1
	[0123.870] lstrcmpW (lpString1=".", lpString2="Cookies") returned -1
	[0123.870] StrStrW (lpFirst="cookies", lpSrch="programdata") returned 0x0
	[0123.870] StrStrW (lpFirst="cookies", lpSrch="$recycle.bin") returned 0x0
	[0123.870] StrStrW (lpFirst="cookies", lpSrch="program files") returned 0x0
	[0123.871] StrStrW (lpFirst="cookies", lpSrch="windows") returned 0x0
	[0123.871] StrStrW (lpFirst="cookies", lpSrch="all users") returned 0x0
	[0123.871] StrStrW (lpFirst="cookies", lpSrch="winnt") returned 0x0
	[0123.871] StrStrW (lpFirst="cookies", lpSrch="appdata") returned 0x0
	[0123.871] StrStrW (lpFirst="cookies", lpSrch="application data") returned 0x0
	[0123.871] StrStrW (lpFirst="cookies", lpSrch="local settings") returned 0x0
	[0123.871] StrStrW (lpFirst="cookies", lpSrch="boot") returned 0x0
	[0124.150] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0124.150] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.150] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Cookies\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="坰f諘b4")) returned 0xffffffff
	[0124.150] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.150] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0124.150] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0124.150] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0124.150] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0124.151] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0124.151] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0124.151] lstrcmpW (lpString1="..", lpString2="Desktop") returned -1
	[0124.151] lstrcmpW (lpString1=".", lpString2="Desktop") returned -1
	[0124.151] StrStrW (lpFirst="desktop", lpSrch="programdata") returned 0x0
	[0124.151] StrStrW (lpFirst="desktop", lpSrch="$recycle.bin") returned 0x0
	[0124.151] StrStrW (lpFirst="desktop", lpSrch="program files") returned 0x0
	[0124.151] StrStrW (lpFirst="desktop", lpSrch="windows") returned 0x0
	[0124.151] StrStrW (lpFirst="desktop", lpSrch="all users") returned 0x0
	[0124.151] StrStrW (lpFirst="desktop", lpSrch="winnt") returned 0x0
	[0124.151] StrStrW (lpFirst="desktop", lpSrch="appdata") returned 0x0
	[0124.151] StrStrW (lpFirst="desktop", lpSrch="application data") returned 0x0
	[0124.151] StrStrW (lpFirst="desktop", lpSrch="local settings") returned 0x0
	[0124.151] StrStrW (lpFirst="desktop", lpSrch="boot") returned 0x0
	[0124.151] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0124.151] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.152] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Desktop\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0124.153] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.153] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.153] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.153] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.153] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.153] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.153] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.153] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.153] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.153] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0124.153] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.153] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0124.153] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.153] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0124.153] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0124.153] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0124.153] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0124.154] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0124.154] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0124.154] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0124.154] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0124.154] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0124.154] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0124.154] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.154] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0124.154] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.154] CreateFileW (lpFileName="C:\\\\Users\\Default\\Desktop\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\desktop\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0124.155] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0124.156] CloseHandle (hObject=0x3bc) returned 1
	[0124.156] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0124.156] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0124.156] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0124.156] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0124.156] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0124.157] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0124.157] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0124.157] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0124.157] lstrcmpW (lpString1="..", lpString2="Documents") returned -1
	[0124.157] lstrcmpW (lpString1=".", lpString2="Documents") returned -1
	[0124.157] StrStrW (lpFirst="documents", lpSrch="programdata") returned 0x0
	[0124.157] StrStrW (lpFirst="documents", lpSrch="$recycle.bin") returned 0x0
	[0124.157] StrStrW (lpFirst="documents", lpSrch="program files") returned 0x0
	[0124.157] StrStrW (lpFirst="documents", lpSrch="windows") returned 0x0
	[0124.157] StrStrW (lpFirst="documents", lpSrch="all users") returned 0x0
	[0124.157] StrStrW (lpFirst="documents", lpSrch="winnt") returned 0x0
	[0124.157] StrStrW (lpFirst="documents", lpSrch="appdata") returned 0x0
	[0124.157] StrStrW (lpFirst="documents", lpSrch="application data") returned 0x0
	[0124.157] StrStrW (lpFirst="documents", lpSrch="local settings") returned 0x0
	[0124.157] StrStrW (lpFirst="documents", lpSrch="boot") returned 0x0
	[0124.158] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0124.158] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.158] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Documents\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0124.159] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.159] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.159] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.159] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.159] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.159] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.159] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.159] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.159] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.159] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0124.159] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.159] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0124.159] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.160] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0124.160] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0124.160] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0124.160] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0124.160] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0124.160] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0124.160] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0124.160] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0124.160] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.160] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0124.160] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.160] lstrcmpW (lpString1="..", lpString2="My Music") returned -1
	[0124.160] lstrcmpW (lpString1=".", lpString2="My Music") returned -1
	[0124.160] StrStrW (lpFirst="my music", lpSrch="programdata") returned 0x0
	[0124.160] StrStrW (lpFirst="my music", lpSrch="$recycle.bin") returned 0x0
	[0124.160] StrStrW (lpFirst="my music", lpSrch="program files") returned 0x0
	[0124.161] StrStrW (lpFirst="my music", lpSrch="windows") returned 0x0
	[0124.161] StrStrW (lpFirst="my music", lpSrch="all users") returned 0x0
	[0124.161] StrStrW (lpFirst="my music", lpSrch="winnt") returned 0x0
	[0124.161] StrStrW (lpFirst="my music", lpSrch="appdata") returned 0x0
	[0124.161] StrStrW (lpFirst="my music", lpSrch="application data") returned 0x0
	[0124.161] StrStrW (lpFirst="my music", lpSrch="local settings") returned 0x0
	[0124.161] StrStrW (lpFirst="my music", lpSrch="boot") returned 0x0
	[0124.161] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0124.161] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0124.161] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x11, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䮸d勸cJ")) returned 0xffffffff
	[0124.161] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0124.161] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0124.161] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0124.161] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0124.161] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.162] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0124.162] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.162] lstrcmpW (lpString1="..", lpString2="My Pictures") returned -1
	[0124.162] lstrcmpW (lpString1=".", lpString2="My Pictures") returned -1
	[0124.162] StrStrW (lpFirst="my pictures", lpSrch="programdata") returned 0x0
	[0124.162] StrStrW (lpFirst="my pictures", lpSrch="$recycle.bin") returned 0x0
	[0124.162] StrStrW (lpFirst="my pictures", lpSrch="program files") returned 0x0
	[0124.162] StrStrW (lpFirst="my pictures", lpSrch="windows") returned 0x0
	[0124.162] StrStrW (lpFirst="my pictures", lpSrch="all users") returned 0x0
	[0124.162] StrStrW (lpFirst="my pictures", lpSrch="winnt") returned 0x0
	[0124.162] StrStrW (lpFirst="my pictures", lpSrch="appdata") returned 0x0
	[0124.162] StrStrW (lpFirst="my pictures", lpSrch="application data") returned 0x0
	[0124.162] StrStrW (lpFirst="my pictures", lpSrch="local settings") returned 0x0
	[0124.162] StrStrW (lpFirst="my pictures", lpSrch="boot") returned 0x0
	[0124.162] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0124.163] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0124.163] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x11, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䮸d勸cP")) returned 0xffffffff
	[0124.163] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0124.163] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0124.163] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0124.163] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0124.163] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.163] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0124.163] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.163] lstrcmpW (lpString1="..", lpString2="My Videos") returned -1
	[0124.163] lstrcmpW (lpString1=".", lpString2="My Videos") returned -1
	[0124.163] StrStrW (lpFirst="my videos", lpSrch="programdata") returned 0x0
	[0124.163] StrStrW (lpFirst="my videos", lpSrch="$recycle.bin") returned 0x0
	[0124.163] StrStrW (lpFirst="my videos", lpSrch="program files") returned 0x0
	[0124.163] StrStrW (lpFirst="my videos", lpSrch="windows") returned 0x0
	[0124.163] StrStrW (lpFirst="my videos", lpSrch="all users") returned 0x0
	[0124.164] StrStrW (lpFirst="my videos", lpSrch="winnt") returned 0x0
	[0124.164] StrStrW (lpFirst="my videos", lpSrch="appdata") returned 0x0
	[0124.164] StrStrW (lpFirst="my videos", lpSrch="application data") returned 0x0
	[0124.164] StrStrW (lpFirst="my videos", lpSrch="local settings") returned 0x0
	[0124.164] StrStrW (lpFirst="my videos", lpSrch="boot") returned 0x0
	[0124.164] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0124.164] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0124.164] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x11, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䮸d勸cL")) returned 0xffffffff
	[0124.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0124.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0124.164] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0124.164] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="my videos", cAlternateFileName="MYVIDE~1")) returned 0
	[0124.164] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0124.165] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0124.165] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.165] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0124.165] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.166] CreateFileW (lpFileName="C:\\\\Users\\Default\\Documents\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\documents\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0124.167] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0124.169] CloseHandle (hObject=0x3bc) returned 1
	[0124.169] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0124.169] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0124.169] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0124.169] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0124.169] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0124.169] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0124.169] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0124.169] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0124.169] lstrcmpW (lpString1="..", lpString2="Downloads") returned -1
	[0124.169] lstrcmpW (lpString1=".", lpString2="Downloads") returned -1
	[0124.169] StrStrW (lpFirst="downloads", lpSrch="programdata") returned 0x0
	[0124.169] StrStrW (lpFirst="downloads", lpSrch="$recycle.bin") returned 0x0
	[0124.169] StrStrW (lpFirst="downloads", lpSrch="program files") returned 0x0
	[0124.169] StrStrW (lpFirst="downloads", lpSrch="windows") returned 0x0
	[0124.169] StrStrW (lpFirst="downloads", lpSrch="all users") returned 0x0
	[0124.169] StrStrW (lpFirst="downloads", lpSrch="winnt") returned 0x0
	[0124.170] StrStrW (lpFirst="downloads", lpSrch="appdata") returned 0x0
	[0124.170] StrStrW (lpFirst="downloads", lpSrch="application data") returned 0x0
	[0124.170] StrStrW (lpFirst="downloads", lpSrch="local settings") returned 0x0
	[0124.170] StrStrW (lpFirst="downloads", lpSrch="boot") returned 0x0
	[0124.170] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0124.170] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.170] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Downloads\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0124.170] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.170] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.170] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.170] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.170] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.171] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.171] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.171] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.171] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.171] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0124.171] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.171] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0124.171] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.171] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0124.171] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0124.171] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0124.171] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0124.171] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0124.171] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0124.171] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0124.171] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0124.171] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0124.171] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0124.171] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.171] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0124.171] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.172] CreateFileW (lpFileName="C:\\\\Users\\Default\\Downloads\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\downloads\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0124.172] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0124.173] CloseHandle (hObject=0x3bc) returned 1
	[0124.173] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0124.173] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0124.173] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0124.173] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0124.173] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0124.173] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0124.174] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0124.174] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0124.174] lstrcmpW (lpString1="..", lpString2="Favorites") returned -1
	[0124.174] lstrcmpW (lpString1=".", lpString2="Favorites") returned -1
	[0124.174] StrStrW (lpFirst="favorites", lpSrch="programdata") returned 0x0
	[0124.174] StrStrW (lpFirst="favorites", lpSrch="$recycle.bin") returned 0x0
	[0124.174] StrStrW (lpFirst="favorites", lpSrch="program files") returned 0x0
	[0124.174] StrStrW (lpFirst="favorites", lpSrch="windows") returned 0x0
	[0124.174] StrStrW (lpFirst="favorites", lpSrch="all users") returned 0x0
	[0124.174] StrStrW (lpFirst="favorites", lpSrch="winnt") returned 0x0
	[0124.174] StrStrW (lpFirst="favorites", lpSrch="appdata") returned 0x0
	[0124.174] StrStrW (lpFirst="favorites", lpSrch="application data") returned 0x0
	[0124.174] StrStrW (lpFirst="favorites", lpSrch="local settings") returned 0x0
	[0124.174] StrStrW (lpFirst="favorites", lpSrch="boot") returned 0x0
	[0124.174] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0124.174] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.174] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Favorites\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0124.196] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.196] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.196] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.196] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.196] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.196] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.196] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.196] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.196] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.196] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0124.196] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.196] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0124.196] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.196] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0124.196] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0124.196] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0124.196] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0124.196] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0124.196] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0124.196] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0124.197] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0124.197] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.197] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0124.197] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.197] lstrcmpW (lpString1="..", lpString2="Links") returned -1
	[0124.197] lstrcmpW (lpString1=".", lpString2="Links") returned -1
	[0124.197] StrStrW (lpFirst="links", lpSrch="programdata") returned 0x0
	[0124.197] StrStrW (lpFirst="links", lpSrch="$recycle.bin") returned 0x0
	[0124.197] StrStrW (lpFirst="links", lpSrch="program files") returned 0x0
	[0124.197] StrStrW (lpFirst="links", lpSrch="windows") returned 0x0
	[0124.197] StrStrW (lpFirst="links", lpSrch="all users") returned 0x0
	[0124.197] StrStrW (lpFirst="links", lpSrch="winnt") returned 0x0
	[0124.197] StrStrW (lpFirst="links", lpSrch="appdata") returned 0x0
	[0124.197] StrStrW (lpFirst="links", lpSrch="application data") returned 0x0
	[0124.197] StrStrW (lpFirst="links", lpSrch="local settings") returned 0x0
	[0124.197] StrStrW (lpFirst="links", lpSrch="boot") returned 0x0
	[0124.197] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0124.197] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0124.197] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0124.198] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0124.198] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0124.198] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.198] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.198] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0124.198] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.198] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0124.198] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.198] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0124.198] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0124.198] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0124.198] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0124.198] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0124.198] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0124.198] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0124.198] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0124.198] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0124.198] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0124.199] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0124.199] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0124.199] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
	[0124.199] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0124.199] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0124.199] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="ntldr") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="pagefile.sys") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="ntdetect.com") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="autoexec.bat") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="desktop.ini") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="autorun.inf") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="ntuser.dat") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="iconcache.db") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="bootsect.bak") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="boot.ini") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="bootfont.bin") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="config.sys") returned 0x0
	[0124.199] StrStrW (lpFirst="web slice gallery.url", lpSrch="io.sys") returned 0x0
	[0124.200] StrStrW (lpFirst="web slice gallery.url", lpSrch="msdos.sys") returned 0x0
	[0124.200] StrStrW (lpFirst="web slice gallery.url", lpSrch="ntuser.dat.log") returned 0x0
	[0124.200] StrStrW (lpFirst="web slice gallery.url", lpSrch="thumbs.db") returned 0x0
	[0124.200] StrStrW (lpFirst="web slice gallery.url", lpSrch="swapfile.sys") returned 0x0
	[0124.200] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0124.200] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=226) returned 1
	[0124.200] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0124.200] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0124.213] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0124.213] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0124.213] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0124.214] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0124.214] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0124.215] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0124.217] GetLastError () returned 0x3e5
	[0124.217] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0124.217] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="web slice gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0
	[0124.217] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0124.217] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0124.217] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0124.217] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0124.217] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0124.217] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\Links\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\favorites\\links\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x378
	[0124.218] WriteFile (in: hFile=0x378, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0124.219] CloseHandle (hObject=0x378) returned 1
	[0124.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0124.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0124.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0124.219] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0124.219] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
	[0124.220] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.220] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0124.220] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.220] lstrcmpW (lpString1="..", lpString2="Microsoft Websites") returned -1
	[0124.220] lstrcmpW (lpString1=".", lpString2="Microsoft Websites") returned -1
	[0124.220] StrStrW (lpFirst="microsoft websites", lpSrch="programdata") returned 0x0
	[0124.220] StrStrW (lpFirst="microsoft websites", lpSrch="$recycle.bin") returned 0x0
	[0124.220] StrStrW (lpFirst="microsoft websites", lpSrch="program files") returned 0x0
	[0124.220] StrStrW (lpFirst="microsoft websites", lpSrch="windows") returned 0x0
	[0124.220] StrStrW (lpFirst="microsoft websites", lpSrch="all users") returned 0x0
	[0124.220] StrStrW (lpFirst="microsoft websites", lpSrch="winnt") returned 0x0
	[0124.220] StrStrW (lpFirst="microsoft websites", lpSrch="appdata") returned 0x0
	[0124.221] StrStrW (lpFirst="microsoft websites", lpSrch="application data") returned 0x0
	[0124.221] StrStrW (lpFirst="microsoft websites", lpSrch="local settings") returned 0x0
	[0124.221] StrStrW (lpFirst="microsoft websites", lpSrch="boot") returned 0x0
	[0124.221] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0124.221] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0124.221] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0124.228] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526388 | out: hHeap=0x5f0000) returned 1
	[0124.228] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0124.228] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0124.228] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0124.228] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0124.228] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0124.228] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0124.228] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.228] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0124.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0124.229] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0124.229] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0124.229] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0124.229] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
	[0124.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0124.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0124.229] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0124.229] StrStrW (lpFirst="ie add-on site.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0124.229] StrStrW (lpFirst="ie add-on site.url", lpSrch="ntldr") returned 0x0
	[0124.229] StrStrW (lpFirst="ie add-on site.url", lpSrch="pagefile.sys") returned 0x0
	[0124.229] StrStrW (lpFirst="ie add-on site.url", lpSrch="ntdetect.com") returned 0x0
	[0124.229] StrStrW (lpFirst="ie add-on site.url", lpSrch="autoexec.bat") returned 0x0
	[0124.229] StrStrW (lpFirst="ie add-on site.url", lpSrch="desktop.ini") returned 0x0
	[0124.229] StrStrW (lpFirst="ie add-on site.url", lpSrch="autorun.inf") returned 0x0
	[0124.229] StrStrW (lpFirst="ie add-on site.url", lpSrch="ntuser.dat") returned 0x0
	[0124.230] StrStrW (lpFirst="ie add-on site.url", lpSrch="iconcache.db") returned 0x0
	[0124.230] StrStrW (lpFirst="ie add-on site.url", lpSrch="bootsect.bak") returned 0x0
	[0124.230] StrStrW (lpFirst="ie add-on site.url", lpSrch="boot.ini") returned 0x0
	[0124.230] StrStrW (lpFirst="ie add-on site.url", lpSrch="bootfont.bin") returned 0x0
	[0124.230] StrStrW (lpFirst="ie add-on site.url", lpSrch="config.sys") returned 0x0
	[0124.230] StrStrW (lpFirst="ie add-on site.url", lpSrch="io.sys") returned 0x0
	[0124.230] StrStrW (lpFirst="ie add-on site.url", lpSrch="msdos.sys") returned 0x0
	[0124.230] StrStrW (lpFirst="ie add-on site.url", lpSrch="ntuser.dat.log") returned 0x0
	[0124.230] StrStrW (lpFirst="ie add-on site.url", lpSrch="thumbs.db") returned 0x0
	[0124.230] StrStrW (lpFirst="ie add-on site.url", lpSrch="swapfile.sys") returned 0x0
	[0124.230] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x378
	[0124.232] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0124.232] CreateIoCompletionPort (FileHandle=0x378, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0124.232] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0124.247] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0124.247] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0124.248] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0124.249] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0124.249] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0124.249] ReadFile (in: hFile=0x378, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0124.250] GetLastError () returned 0x3e5
	[0124.250] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0124.250] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
	[0124.250] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0124.250] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0124.251] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="ntldr") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="pagefile.sys") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="ntdetect.com") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="autoexec.bat") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="desktop.ini") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="autorun.inf") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="ntuser.dat") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="iconcache.db") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="bootsect.bak") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="boot.ini") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="bootfont.bin") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="config.sys") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="io.sys") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="msdos.sys") returned 0x0
	[0124.251] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="ntuser.dat.log") returned 0x0
	[0124.252] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="thumbs.db") returned 0x0
	[0124.252] StrStrW (lpFirst="ie site on microsoft.com.url", lpSrch="swapfile.sys") returned 0x0
	[0124.252] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0124.252] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0124.252] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0124.252] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0124.460] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643ef8
	[0124.463] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0124.463] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0124.470] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0124.470] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0124.471] ReadFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 0
	[0124.475] GetLastError () returned 0x3e5
	[0124.475] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0124.475] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
	[0124.475] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0124.475] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0124.475] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0124.475] StrStrW (lpFirst="microsoft at home.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0124.475] StrStrW (lpFirst="microsoft at home.url", lpSrch="ntldr") returned 0x0
	[0124.475] StrStrW (lpFirst="microsoft at home.url", lpSrch="pagefile.sys") returned 0x0
	[0124.475] StrStrW (lpFirst="microsoft at home.url", lpSrch="ntdetect.com") returned 0x0
	[0124.475] StrStrW (lpFirst="microsoft at home.url", lpSrch="autoexec.bat") returned 0x0
	[0124.475] StrStrW (lpFirst="microsoft at home.url", lpSrch="desktop.ini") returned 0x0
	[0124.475] StrStrW (lpFirst="microsoft at home.url", lpSrch="autorun.inf") returned 0x0
	[0124.475] StrStrW (lpFirst="microsoft at home.url", lpSrch="ntuser.dat") returned 0x0
	[0124.475] StrStrW (lpFirst="microsoft at home.url", lpSrch="iconcache.db") returned 0x0
	[0124.475] StrStrW (lpFirst="microsoft at home.url", lpSrch="bootsect.bak") returned 0x0
	[0124.475] StrStrW (lpFirst="microsoft at home.url", lpSrch="boot.ini") returned 0x0
	[0124.475] StrStrW (lpFirst="microsoft at home.url", lpSrch="bootfont.bin") returned 0x0
	[0124.476] StrStrW (lpFirst="microsoft at home.url", lpSrch="config.sys") returned 0x0
	[0124.476] StrStrW (lpFirst="microsoft at home.url", lpSrch="io.sys") returned 0x0
	[0124.476] StrStrW (lpFirst="microsoft at home.url", lpSrch="msdos.sys") returned 0x0
	[0124.476] StrStrW (lpFirst="microsoft at home.url", lpSrch="ntuser.dat.log") returned 0x0
	[0124.476] StrStrW (lpFirst="microsoft at home.url", lpSrch="thumbs.db") returned 0x0
	[0124.476] StrStrW (lpFirst="microsoft at home.url", lpSrch="swapfile.sys") returned 0x0
	[0124.476] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0124.739] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0124.739] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0124.739] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0124.835] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0124.835] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0124.835] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0124.836] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0124.837] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0124.837] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0124.843] GetLastError () returned 0x3e5
	[0124.843] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0124.843] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
	[0124.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0124.843] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0124.844] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="ntldr") returned 0x0
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="pagefile.sys") returned 0x0
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="ntdetect.com") returned 0x0
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="autoexec.bat") returned 0x0
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="desktop.ini") returned 0x0
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="autorun.inf") returned 0x0
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="ntuser.dat") returned 0x0
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="iconcache.db") returned 0x0
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="bootsect.bak") returned 0x0
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="boot.ini") returned 0x0
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="bootfont.bin") returned 0x0
	[0124.844] StrStrW (lpFirst="microsoft at work.url", lpSrch="config.sys") returned 0x0
	[0124.845] StrStrW (lpFirst="microsoft at work.url", lpSrch="io.sys") returned 0x0
	[0124.845] StrStrW (lpFirst="microsoft at work.url", lpSrch="msdos.sys") returned 0x0
	[0124.845] StrStrW (lpFirst="microsoft at work.url", lpSrch="ntuser.dat.log") returned 0x0
	[0124.845] StrStrW (lpFirst="microsoft at work.url", lpSrch="thumbs.db") returned 0x0
	[0124.845] StrStrW (lpFirst="microsoft at work.url", lpSrch="swapfile.sys") returned 0x0
	[0124.845] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0124.845] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0124.846] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0124.846] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0124.861] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0124.863] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0124.864] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0124.864] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0124.864] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0124.865] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0124.869] GetLastError () returned 0x3e5
	[0124.869] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0124.870] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
	[0124.870] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0124.870] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0124.870] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0124.870] StrStrW (lpFirst="microsoft store.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0124.870] StrStrW (lpFirst="microsoft store.url", lpSrch="ntldr") returned 0x0
	[0124.870] StrStrW (lpFirst="microsoft store.url", lpSrch="pagefile.sys") returned 0x0
	[0124.870] StrStrW (lpFirst="microsoft store.url", lpSrch="ntdetect.com") returned 0x0
	[0124.870] StrStrW (lpFirst="microsoft store.url", lpSrch="autoexec.bat") returned 0x0
	[0124.870] StrStrW (lpFirst="microsoft store.url", lpSrch="desktop.ini") returned 0x0
	[0124.870] StrStrW (lpFirst="microsoft store.url", lpSrch="autorun.inf") returned 0x0
	[0124.870] StrStrW (lpFirst="microsoft store.url", lpSrch="ntuser.dat") returned 0x0
	[0124.870] StrStrW (lpFirst="microsoft store.url", lpSrch="iconcache.db") returned 0x0
	[0124.870] StrStrW (lpFirst="microsoft store.url", lpSrch="bootsect.bak") returned 0x0
	[0124.870] StrStrW (lpFirst="microsoft store.url", lpSrch="boot.ini") returned 0x0
	[0124.870] StrStrW (lpFirst="microsoft store.url", lpSrch="bootfont.bin") returned 0x0
	[0124.871] StrStrW (lpFirst="microsoft store.url", lpSrch="config.sys") returned 0x0
	[0124.871] StrStrW (lpFirst="microsoft store.url", lpSrch="io.sys") returned 0x0
	[0124.871] StrStrW (lpFirst="microsoft store.url", lpSrch="msdos.sys") returned 0x0
	[0124.871] StrStrW (lpFirst="microsoft store.url", lpSrch="ntuser.dat.log") returned 0x0
	[0124.871] StrStrW (lpFirst="microsoft store.url", lpSrch="thumbs.db") returned 0x0
	[0124.871] StrStrW (lpFirst="microsoft store.url", lpSrch="swapfile.sys") returned 0x0
	[0124.871] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0124.872] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=134) returned 1
	[0124.872] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0124.872] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0124.887] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0124.887] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0124.887] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0124.888] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0124.888] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0124.888] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0124.895] GetLastError () returned 0x3e5
	[0124.895] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0124.895] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft store.url", cAlternateFileName="MICROS~1.URL")) returned 0
	[0124.895] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0124.895] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0124.895] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0124.895] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0124.895] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0124.895] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\Microsoft Websites\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0124.896] WriteFile (in: hFile=0x3dc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0124.897] CloseHandle (hObject=0x3dc) returned 1
	[0124.897] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0124.897] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0124.897] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0124.897] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0124.897] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
	[0124.897] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0124.897] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0124.897] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0124.897] lstrcmpW (lpString1="..", lpString2="MSN Websites") returned -1
	[0124.898] lstrcmpW (lpString1=".", lpString2="MSN Websites") returned -1
	[0124.898] StrStrW (lpFirst="msn websites", lpSrch="programdata") returned 0x0
	[0124.898] StrStrW (lpFirst="msn websites", lpSrch="$recycle.bin") returned 0x0
	[0124.898] StrStrW (lpFirst="msn websites", lpSrch="program files") returned 0x0
	[0124.898] StrStrW (lpFirst="msn websites", lpSrch="windows") returned 0x0
	[0124.898] StrStrW (lpFirst="msn websites", lpSrch="all users") returned 0x0
	[0124.898] StrStrW (lpFirst="msn websites", lpSrch="winnt") returned 0x0
	[0124.898] StrStrW (lpFirst="msn websites", lpSrch="appdata") returned 0x0
	[0124.898] StrStrW (lpFirst="msn websites", lpSrch="application data") returned 0x0
	[0124.898] StrStrW (lpFirst="msn websites", lpSrch="local settings") returned 0x0
	[0124.898] StrStrW (lpFirst="msn websites", lpSrch="boot") returned 0x0
	[0124.898] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0124.898] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0124.898] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0125.035] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0125.035] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0125.035] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0125.035] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0125.035] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0125.035] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.035] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0125.035] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0125.035] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0125.035] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
	[0125.035] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0125.036] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0125.036] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0125.036] StrStrW (lpFirst="msn autos.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0125.036] StrStrW (lpFirst="msn autos.url", lpSrch="ntldr") returned 0x0
	[0125.036] StrStrW (lpFirst="msn autos.url", lpSrch="pagefile.sys") returned 0x0
	[0125.036] StrStrW (lpFirst="msn autos.url", lpSrch="ntdetect.com") returned 0x0
	[0125.036] StrStrW (lpFirst="msn autos.url", lpSrch="autoexec.bat") returned 0x0
	[0125.036] StrStrW (lpFirst="msn autos.url", lpSrch="desktop.ini") returned 0x0
	[0125.036] StrStrW (lpFirst="msn autos.url", lpSrch="autorun.inf") returned 0x0
	[0125.036] StrStrW (lpFirst="msn autos.url", lpSrch="ntuser.dat") returned 0x0
	[0125.036] StrStrW (lpFirst="msn autos.url", lpSrch="iconcache.db") returned 0x0
	[0125.037] StrStrW (lpFirst="msn autos.url", lpSrch="bootsect.bak") returned 0x0
	[0125.037] StrStrW (lpFirst="msn autos.url", lpSrch="boot.ini") returned 0x0
	[0125.037] StrStrW (lpFirst="msn autos.url", lpSrch="bootfont.bin") returned 0x0
	[0125.037] StrStrW (lpFirst="msn autos.url", lpSrch="config.sys") returned 0x0
	[0125.037] StrStrW (lpFirst="msn autos.url", lpSrch="io.sys") returned 0x0
	[0125.037] StrStrW (lpFirst="msn autos.url", lpSrch="msdos.sys") returned 0x0
	[0125.037] StrStrW (lpFirst="msn autos.url", lpSrch="ntuser.dat.log") returned 0x0
	[0125.037] StrStrW (lpFirst="msn autos.url", lpSrch="thumbs.db") returned 0x0
	[0125.037] StrStrW (lpFirst="msn autos.url", lpSrch="swapfile.sys") returned 0x0
	[0125.037] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0125.038] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0125.038] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0125.038] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0125.051] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0125.051] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0125.051] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0125.052] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0125.052] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0125.052] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0125.058] GetLastError () returned 0x3e5
	[0125.058] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0125.058] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
	[0125.059] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0125.059] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0125.059] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0125.059] StrStrW (lpFirst="msn entertainment.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0125.059] StrStrW (lpFirst="msn entertainment.url", lpSrch="ntldr") returned 0x0
	[0125.059] StrStrW (lpFirst="msn entertainment.url", lpSrch="pagefile.sys") returned 0x0
	[0125.059] StrStrW (lpFirst="msn entertainment.url", lpSrch="ntdetect.com") returned 0x0
	[0125.059] StrStrW (lpFirst="msn entertainment.url", lpSrch="autoexec.bat") returned 0x0
	[0125.059] StrStrW (lpFirst="msn entertainment.url", lpSrch="desktop.ini") returned 0x0
	[0125.059] StrStrW (lpFirst="msn entertainment.url", lpSrch="autorun.inf") returned 0x0
	[0125.059] StrStrW (lpFirst="msn entertainment.url", lpSrch="ntuser.dat") returned 0x0
	[0125.059] StrStrW (lpFirst="msn entertainment.url", lpSrch="iconcache.db") returned 0x0
	[0125.059] StrStrW (lpFirst="msn entertainment.url", lpSrch="bootsect.bak") returned 0x0
	[0125.059] StrStrW (lpFirst="msn entertainment.url", lpSrch="boot.ini") returned 0x0
	[0125.060] StrStrW (lpFirst="msn entertainment.url", lpSrch="bootfont.bin") returned 0x0
	[0125.060] StrStrW (lpFirst="msn entertainment.url", lpSrch="config.sys") returned 0x0
	[0125.060] StrStrW (lpFirst="msn entertainment.url", lpSrch="io.sys") returned 0x0
	[0125.060] StrStrW (lpFirst="msn entertainment.url", lpSrch="msdos.sys") returned 0x0
	[0125.060] StrStrW (lpFirst="msn entertainment.url", lpSrch="ntuser.dat.log") returned 0x0
	[0125.060] StrStrW (lpFirst="msn entertainment.url", lpSrch="thumbs.db") returned 0x0
	[0125.060] StrStrW (lpFirst="msn entertainment.url", lpSrch="swapfile.sys") returned 0x0
	[0125.060] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0125.062] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0125.062] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0125.062] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0125.169] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0125.169] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0125.169] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0125.170] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0125.170] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0125.170] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0125.176] GetLastError () returned 0x3e5
	[0125.176] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0125.176] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
	[0125.176] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0125.176] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0125.176] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="ntldr") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="pagefile.sys") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="ntdetect.com") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="autoexec.bat") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="desktop.ini") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="autorun.inf") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="ntuser.dat") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="iconcache.db") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="bootsect.bak") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="boot.ini") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="bootfont.bin") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="config.sys") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="io.sys") returned 0x0
	[0125.177] StrStrW (lpFirst="msn money.url", lpSrch="msdos.sys") returned 0x0
	[0125.178] StrStrW (lpFirst="msn money.url", lpSrch="ntuser.dat.log") returned 0x0
	[0125.178] StrStrW (lpFirst="msn money.url", lpSrch="thumbs.db") returned 0x0
	[0125.178] StrStrW (lpFirst="msn money.url", lpSrch="swapfile.sys") returned 0x0
	[0125.178] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0125.178] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0125.178] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0125.178] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0125.270] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0125.270] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0125.270] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0125.271] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0125.271] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0125.271] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0125.277] GetLastError () returned 0x3e5
	[0125.277] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0125.277] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
	[0125.277] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0125.277] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0125.277] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0125.277] StrStrW (lpFirst="msn sports.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0125.277] StrStrW (lpFirst="msn sports.url", lpSrch="ntldr") returned 0x0
	[0125.277] StrStrW (lpFirst="msn sports.url", lpSrch="pagefile.sys") returned 0x0
	[0125.277] StrStrW (lpFirst="msn sports.url", lpSrch="ntdetect.com") returned 0x0
	[0125.277] StrStrW (lpFirst="msn sports.url", lpSrch="autoexec.bat") returned 0x0
	[0125.277] StrStrW (lpFirst="msn sports.url", lpSrch="desktop.ini") returned 0x0
	[0125.278] StrStrW (lpFirst="msn sports.url", lpSrch="autorun.inf") returned 0x0
	[0125.278] StrStrW (lpFirst="msn sports.url", lpSrch="ntuser.dat") returned 0x0
	[0125.278] StrStrW (lpFirst="msn sports.url", lpSrch="iconcache.db") returned 0x0
	[0125.278] StrStrW (lpFirst="msn sports.url", lpSrch="bootsect.bak") returned 0x0
	[0125.278] StrStrW (lpFirst="msn sports.url", lpSrch="boot.ini") returned 0x0
	[0125.278] StrStrW (lpFirst="msn sports.url", lpSrch="bootfont.bin") returned 0x0
	[0125.278] StrStrW (lpFirst="msn sports.url", lpSrch="config.sys") returned 0x0
	[0125.278] StrStrW (lpFirst="msn sports.url", lpSrch="io.sys") returned 0x0
	[0125.278] StrStrW (lpFirst="msn sports.url", lpSrch="msdos.sys") returned 0x0
	[0125.278] StrStrW (lpFirst="msn sports.url", lpSrch="ntuser.dat.log") returned 0x0
	[0125.278] StrStrW (lpFirst="msn sports.url", lpSrch="thumbs.db") returned 0x0
	[0125.278] StrStrW (lpFirst="msn sports.url", lpSrch="swapfile.sys") returned 0x0
	[0125.278] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0125.279] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0125.279] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0125.279] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0125.515] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0125.515] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0125.515] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0125.517] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0125.517] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0125.517] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0125.523] GetLastError () returned 0x3e5
	[0125.523] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0125.523] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
	[0125.523] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0125.523] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0125.523] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0125.523] StrStrW (lpFirst="msn.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0125.523] StrStrW (lpFirst="msn.url", lpSrch="ntldr") returned 0x0
	[0125.523] StrStrW (lpFirst="msn.url", lpSrch="pagefile.sys") returned 0x0
	[0125.523] StrStrW (lpFirst="msn.url", lpSrch="ntdetect.com") returned 0x0
	[0125.523] StrStrW (lpFirst="msn.url", lpSrch="autoexec.bat") returned 0x0
	[0125.523] StrStrW (lpFirst="msn.url", lpSrch="desktop.ini") returned 0x0
	[0125.523] StrStrW (lpFirst="msn.url", lpSrch="autorun.inf") returned 0x0
	[0125.523] StrStrW (lpFirst="msn.url", lpSrch="ntuser.dat") returned 0x0
	[0125.523] StrStrW (lpFirst="msn.url", lpSrch="iconcache.db") returned 0x0
	[0125.523] StrStrW (lpFirst="msn.url", lpSrch="bootsect.bak") returned 0x0
	[0125.524] StrStrW (lpFirst="msn.url", lpSrch="boot.ini") returned 0x0
	[0125.524] StrStrW (lpFirst="msn.url", lpSrch="bootfont.bin") returned 0x0
	[0125.524] StrStrW (lpFirst="msn.url", lpSrch="config.sys") returned 0x0
	[0125.524] StrStrW (lpFirst="msn.url", lpSrch="io.sys") returned 0x0
	[0125.524] StrStrW (lpFirst="msn.url", lpSrch="msdos.sys") returned 0x0
	[0125.524] StrStrW (lpFirst="msn.url", lpSrch="ntuser.dat.log") returned 0x0
	[0125.524] StrStrW (lpFirst="msn.url", lpSrch="thumbs.db") returned 0x0
	[0125.524] StrStrW (lpFirst="msn.url", lpSrch="swapfile.sys") returned 0x0
	[0125.524] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0125.604] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0125.604] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0125.604] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0125.617] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0125.617] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0125.617] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0125.618] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0125.618] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0125.618] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0125.629] GetLastError () returned 0x3e5
	[0125.629] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0125.629] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
	[0125.629] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0125.629] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0125.629] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0125.629] StrStrW (lpFirst="msnbc news.url", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0125.629] StrStrW (lpFirst="msnbc news.url", lpSrch="ntldr") returned 0x0
	[0125.629] StrStrW (lpFirst="msnbc news.url", lpSrch="pagefile.sys") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="ntdetect.com") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="autoexec.bat") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="desktop.ini") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="autorun.inf") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="ntuser.dat") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="iconcache.db") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="bootsect.bak") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="boot.ini") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="bootfont.bin") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="config.sys") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="io.sys") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="msdos.sys") returned 0x0
	[0125.630] StrStrW (lpFirst="msnbc news.url", lpSrch="ntuser.dat.log") returned 0x0
	[0125.631] StrStrW (lpFirst="msnbc news.url", lpSrch="thumbs.db") returned 0x0
	[0125.631] StrStrW (lpFirst="msnbc news.url", lpSrch="swapfile.sys") returned 0x0
	[0125.631] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0125.631] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=133) returned 1
	[0125.631] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0125.631] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0125.644] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0125.644] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0125.645] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0125.648] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0125.648] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0125.648] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0125.827] GetLastError () returned 0x3e5
	[0125.827] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0125.827] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="msnbc news.url", cAlternateFileName="MSNBCN~1.URL")) returned 0
	[0125.827] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0125.827] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0125.827] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0125.827] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0125.827] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0125.827] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\MSN Websites\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\favorites\\msn websites\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc
	[0125.828] WriteFile (in: hFile=0x3dc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0125.829] CloseHandle (hObject=0x3dc) returned 1
	[0125.829] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0125.829] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0125.829] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0125.829] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0125.829] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
	[0125.829] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0125.829] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0125.829] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0125.829] lstrcmpW (lpString1="..", lpString2="Windows Live") returned -1
	[0125.829] lstrcmpW (lpString1=".", lpString2="Windows Live") returned -1
	[0125.829] StrStrW (lpFirst="windows live", lpSrch="programdata") returned 0x0
	[0125.829] StrStrW (lpFirst="windows live", lpSrch="$recycle.bin") returned 0x0
	[0125.830] StrStrW (lpFirst="windows live", lpSrch="program files") returned 0x0
	[0125.830] StrStrW (lpFirst="windows live", lpSrch="windows") returned="windows live"
	[0125.830] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0125.830] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="windows live", cAlternateFileName="WINDOW~1")) returned 0
	[0125.830] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0125.830] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0125.830] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0125.830] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0125.830] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0125.830] CreateFileW (lpFileName="C:\\\\Users\\Default\\Favorites\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\favorites\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0125.831] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0125.832] CloseHandle (hObject=0x3bc) returned 1
	[0125.832] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0125.832] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0125.832] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0125.832] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0125.832] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0125.832] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0125.832] lstrcmpW (lpString1="..", lpString2="Links") returned -1
	[0125.832] lstrcmpW (lpString1=".", lpString2="Links") returned -1
	[0125.832] StrStrW (lpFirst="links", lpSrch="programdata") returned 0x0
	[0125.833] StrStrW (lpFirst="links", lpSrch="$recycle.bin") returned 0x0
	[0125.833] StrStrW (lpFirst="links", lpSrch="program files") returned 0x0
	[0125.833] StrStrW (lpFirst="links", lpSrch="windows") returned 0x0
	[0125.833] StrStrW (lpFirst="links", lpSrch="all users") returned 0x0
	[0125.833] StrStrW (lpFirst="links", lpSrch="winnt") returned 0x0
	[0125.833] StrStrW (lpFirst="links", lpSrch="appdata") returned 0x0
	[0125.833] StrStrW (lpFirst="links", lpSrch="application data") returned 0x0
	[0125.833] StrStrW (lpFirst="links", lpSrch="local settings") returned 0x0
	[0125.833] StrStrW (lpFirst="links", lpSrch="boot") returned 0x0
	[0125.833] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520210
	[0125.833] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0125.833] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Links\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0125.861] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0125.861] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0125.861] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0125.861] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0125.861] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0125.861] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.861] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0125.861] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0125.861] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0125.861] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0125.861] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0125.861] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0125.861] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0125.861] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0125.861] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0125.861] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0125.861] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0125.862] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0125.862] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0125.862] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0125.862] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0125.862] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0125.862] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0125.862] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0125.862] StrStrW (lpFirst="desktop.lnk", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0125.862] StrStrW (lpFirst="desktop.lnk", lpSrch="ntldr") returned 0x0
	[0125.862] StrStrW (lpFirst="desktop.lnk", lpSrch="pagefile.sys") returned 0x0
	[0125.862] StrStrW (lpFirst="desktop.lnk", lpSrch="ntdetect.com") returned 0x0
	[0125.862] StrStrW (lpFirst="desktop.lnk", lpSrch="autoexec.bat") returned 0x0
	[0125.862] StrStrW (lpFirst="desktop.lnk", lpSrch="desktop.ini") returned 0x0
	[0125.862] StrStrW (lpFirst="desktop.lnk", lpSrch="autorun.inf") returned 0x0
	[0125.862] StrStrW (lpFirst="desktop.lnk", lpSrch="ntuser.dat") returned 0x0
	[0125.862] StrStrW (lpFirst="desktop.lnk", lpSrch="iconcache.db") returned 0x0
	[0125.862] StrStrW (lpFirst="desktop.lnk", lpSrch="bootsect.bak") returned 0x0
	[0125.863] StrStrW (lpFirst="desktop.lnk", lpSrch="boot.ini") returned 0x0
	[0125.863] StrStrW (lpFirst="desktop.lnk", lpSrch="bootfont.bin") returned 0x0
	[0125.863] StrStrW (lpFirst="desktop.lnk", lpSrch="config.sys") returned 0x0
	[0125.863] StrStrW (lpFirst="desktop.lnk", lpSrch="io.sys") returned 0x0
	[0125.863] StrStrW (lpFirst="desktop.lnk", lpSrch="msdos.sys") returned 0x0
	[0125.863] StrStrW (lpFirst="desktop.lnk", lpSrch="ntuser.dat.log") returned 0x0
	[0125.863] StrStrW (lpFirst="desktop.lnk", lpSrch="thumbs.db") returned 0x0
	[0125.863] StrStrW (lpFirst="desktop.lnk", lpSrch="swapfile.sys") returned 0x0
	[0125.863] CreateFileW (lpFileName="C:\\\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0125.864] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=467) returned 1
	[0125.864] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0125.864] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0125.876] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0125.876] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0125.876] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0125.877] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0125.877] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0125.877] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0125.883] GetLastError () returned 0x3e5
	[0125.883] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0125.883] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0125.883] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0125.883] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0125.883] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0125.883] StrStrW (lpFirst="downloads.lnk", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0125.883] StrStrW (lpFirst="downloads.lnk", lpSrch="ntldr") returned 0x0
	[0125.883] StrStrW (lpFirst="downloads.lnk", lpSrch="pagefile.sys") returned 0x0
	[0125.883] StrStrW (lpFirst="downloads.lnk", lpSrch="ntdetect.com") returned 0x0
	[0125.883] StrStrW (lpFirst="downloads.lnk", lpSrch="autoexec.bat") returned 0x0
	[0125.883] StrStrW (lpFirst="downloads.lnk", lpSrch="desktop.ini") returned 0x0
	[0125.883] StrStrW (lpFirst="downloads.lnk", lpSrch="autorun.inf") returned 0x0
	[0125.883] StrStrW (lpFirst="downloads.lnk", lpSrch="ntuser.dat") returned 0x0
	[0125.885] StrStrW (lpFirst="downloads.lnk", lpSrch="iconcache.db") returned 0x0
	[0125.885] StrStrW (lpFirst="downloads.lnk", lpSrch="bootsect.bak") returned 0x0
	[0125.885] StrStrW (lpFirst="downloads.lnk", lpSrch="boot.ini") returned 0x0
	[0125.885] StrStrW (lpFirst="downloads.lnk", lpSrch="bootfont.bin") returned 0x0
	[0125.885] StrStrW (lpFirst="downloads.lnk", lpSrch="config.sys") returned 0x0
	[0125.885] StrStrW (lpFirst="downloads.lnk", lpSrch="io.sys") returned 0x0
	[0125.885] StrStrW (lpFirst="downloads.lnk", lpSrch="msdos.sys") returned 0x0
	[0125.885] StrStrW (lpFirst="downloads.lnk", lpSrch="ntuser.dat.log") returned 0x0
	[0125.886] StrStrW (lpFirst="downloads.lnk", lpSrch="thumbs.db") returned 0x0
	[0125.886] StrStrW (lpFirst="downloads.lnk", lpSrch="swapfile.sys") returned 0x0
	[0125.886] CreateFileW (lpFileName="C:\\\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0125.886] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=894) returned 1
	[0125.886] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0125.886] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0125.899] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0125.899] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0125.899] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0125.900] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0125.900] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0125.901] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0126.137] GetLastError () returned 0x3e5
	[0126.138] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.138] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1
	[0126.138] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.138] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.138] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.138] StrStrW (lpFirst="recentplaces.lnk", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.138] StrStrW (lpFirst="recentplaces.lnk", lpSrch="ntldr") returned 0x0
	[0126.138] StrStrW (lpFirst="recentplaces.lnk", lpSrch="pagefile.sys") returned 0x0
	[0126.138] StrStrW (lpFirst="recentplaces.lnk", lpSrch="ntdetect.com") returned 0x0
	[0126.138] StrStrW (lpFirst="recentplaces.lnk", lpSrch="autoexec.bat") returned 0x0
	[0126.138] StrStrW (lpFirst="recentplaces.lnk", lpSrch="desktop.ini") returned 0x0
	[0126.138] StrStrW (lpFirst="recentplaces.lnk", lpSrch="autorun.inf") returned 0x0
	[0126.139] StrStrW (lpFirst="recentplaces.lnk", lpSrch="ntuser.dat") returned 0x0
	[0126.139] StrStrW (lpFirst="recentplaces.lnk", lpSrch="iconcache.db") returned 0x0
	[0126.139] StrStrW (lpFirst="recentplaces.lnk", lpSrch="bootsect.bak") returned 0x0
	[0126.139] StrStrW (lpFirst="recentplaces.lnk", lpSrch="boot.ini") returned 0x0
	[0126.139] StrStrW (lpFirst="recentplaces.lnk", lpSrch="bootfont.bin") returned 0x0
	[0126.139] StrStrW (lpFirst="recentplaces.lnk", lpSrch="config.sys") returned 0x0
	[0126.139] StrStrW (lpFirst="recentplaces.lnk", lpSrch="io.sys") returned 0x0
	[0126.139] StrStrW (lpFirst="recentplaces.lnk", lpSrch="msdos.sys") returned 0x0
	[0126.139] StrStrW (lpFirst="recentplaces.lnk", lpSrch="ntuser.dat.log") returned 0x0
	[0126.139] StrStrW (lpFirst="recentplaces.lnk", lpSrch="thumbs.db") returned 0x0
	[0126.139] StrStrW (lpFirst="recentplaces.lnk", lpSrch="swapfile.sys") returned 0x0
	[0126.139] CreateFileW (lpFileName="C:\\\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0126.143] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=363) returned 1
	[0126.143] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0126.143] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0126.157] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0126.157] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0126.158] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0126.159] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0126.159] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0126.159] ReadFile (in: hFile=0x3d8, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0126.160] GetLastError () returned 0x3e5
	[0126.160] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.160] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="recentplaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0
	[0126.160] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0126.161] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520248
	[0126.161] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.161] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.161] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.161] CreateFileW (lpFileName="C:\\\\Users\\Default\\Links\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\links\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0126.162] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0126.163] CloseHandle (hObject=0x3bc) returned 1
	[0126.163] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.163] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520248 | out: hHeap=0x5f0000) returned 1
	[0126.163] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520210 | out: hHeap=0x5f0000) returned 1
	[0126.163] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.163] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0126.163] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.163] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.163] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.163] lstrcmpW (lpString1="..", lpString2="Local Settings") returned -1
	[0126.163] lstrcmpW (lpString1=".", lpString2="Local Settings") returned -1
	[0126.164] StrStrW (lpFirst="local settings", lpSrch="programdata") returned 0x0
	[0126.164] StrStrW (lpFirst="local settings", lpSrch="$recycle.bin") returned 0x0
	[0126.164] StrStrW (lpFirst="local settings", lpSrch="program files") returned 0x0
	[0126.164] StrStrW (lpFirst="local settings", lpSrch="windows") returned 0x0
	[0126.165] StrStrW (lpFirst="local settings", lpSrch="all users") returned 0x0
	[0126.165] StrStrW (lpFirst="local settings", lpSrch="winnt") returned 0x0
	[0126.165] StrStrW (lpFirst="local settings", lpSrch="appdata") returned 0x0
	[0126.166] StrStrW (lpFirst="local settings", lpSrch="application data") returned 0x0
	[0126.166] StrStrW (lpFirst="local settings", lpSrch="local settings") returned="local settings"
	[0126.166] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0126.166] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0126.166] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.166] lstrcmpW (lpString1="..", lpString2="Music") returned -1
	[0126.166] lstrcmpW (lpString1=".", lpString2="Music") returned -1
	[0126.166] StrStrW (lpFirst="music", lpSrch="programdata") returned 0x0
	[0126.166] StrStrW (lpFirst="music", lpSrch="$recycle.bin") returned 0x0
	[0126.166] StrStrW (lpFirst="music", lpSrch="program files") returned 0x0
	[0126.166] StrStrW (lpFirst="music", lpSrch="windows") returned 0x0
	[0126.166] StrStrW (lpFirst="music", lpSrch="all users") returned 0x0
	[0126.166] StrStrW (lpFirst="music", lpSrch="winnt") returned 0x0
	[0126.167] StrStrW (lpFirst="music", lpSrch="appdata") returned 0x0
	[0126.167] StrStrW (lpFirst="music", lpSrch="application data") returned 0x0
	[0126.167] StrStrW (lpFirst="music", lpSrch="local settings") returned 0x0
	[0126.167] StrStrW (lpFirst="music", lpSrch="boot") returned 0x0
	[0126.167] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520210
	[0126.167] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.167] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Music\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0126.168] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.168] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.168] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.168] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.168] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.168] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.168] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.168] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.168] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.168] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.168] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.168] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0126.168] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.168] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.168] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.169] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.169] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.171] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.172] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.172] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.172] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0126.172] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0126.172] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520248
	[0126.172] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.172] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.172] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.172] CreateFileW (lpFileName="C:\\\\Users\\Default\\Music\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\music\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0126.173] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0126.174] CloseHandle (hObject=0x3bc) returned 1
	[0126.174] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.174] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520248 | out: hHeap=0x5f0000) returned 1
	[0126.174] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520210 | out: hHeap=0x5f0000) returned 1
	[0126.174] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.174] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0126.175] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.175] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.175] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.175] lstrcmpW (lpString1="..", lpString2="My Documents") returned -1
	[0126.175] lstrcmpW (lpString1=".", lpString2="My Documents") returned -1
	[0126.175] StrStrW (lpFirst="my documents", lpSrch="programdata") returned 0x0
	[0126.175] StrStrW (lpFirst="my documents", lpSrch="$recycle.bin") returned 0x0
	[0126.175] StrStrW (lpFirst="my documents", lpSrch="program files") returned 0x0
	[0126.175] StrStrW (lpFirst="my documents", lpSrch="windows") returned 0x0
	[0126.175] StrStrW (lpFirst="my documents", lpSrch="all users") returned 0x0
	[0126.175] StrStrW (lpFirst="my documents", lpSrch="winnt") returned 0x0
	[0126.175] StrStrW (lpFirst="my documents", lpSrch="appdata") returned 0x0
	[0126.175] StrStrW (lpFirst="my documents", lpSrch="application data") returned 0x0
	[0126.176] StrStrW (lpFirst="my documents", lpSrch="local settings") returned 0x0
	[0126.176] StrStrW (lpFirst="my documents", lpSrch="boot") returned 0x0
	[0126.176] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.176] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.176] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\My Documents\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="坰f諘b>")) returned 0xffffffff
	[0126.176] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0126.176] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.176] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.176] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0126.176] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.176] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.177] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.177] lstrcmpW (lpString1="..", lpString2="NetHood") returned -1
	[0126.177] lstrcmpW (lpString1=".", lpString2="NetHood") returned -1
	[0126.177] StrStrW (lpFirst="nethood", lpSrch="programdata") returned 0x0
	[0126.177] StrStrW (lpFirst="nethood", lpSrch="$recycle.bin") returned 0x0
	[0126.177] StrStrW (lpFirst="nethood", lpSrch="program files") returned 0x0
	[0126.177] StrStrW (lpFirst="nethood", lpSrch="windows") returned 0x0
	[0126.177] StrStrW (lpFirst="nethood", lpSrch="all users") returned 0x0
	[0126.177] StrStrW (lpFirst="nethood", lpSrch="winnt") returned 0x0
	[0126.178] StrStrW (lpFirst="nethood", lpSrch="appdata") returned 0x0
	[0126.178] StrStrW (lpFirst="nethood", lpSrch="application data") returned 0x0
	[0126.178] StrStrW (lpFirst="nethood", lpSrch="local settings") returned 0x0
	[0126.178] StrStrW (lpFirst="nethood", lpSrch="boot") returned 0x0
	[0126.178] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.178] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.178] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\NetHood\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="坰f諘b4")) returned 0xffffffff
	[0126.178] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.178] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.179] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.179] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0126.179] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.179] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.179] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.179] StrStrW (lpFirst="ntuser.dat", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.179] StrStrW (lpFirst="ntuser.dat", lpSrch="ntldr") returned 0x0
	[0126.179] StrStrW (lpFirst="ntuser.dat", lpSrch="pagefile.sys") returned 0x0
	[0126.179] StrStrW (lpFirst="ntuser.dat", lpSrch="ntdetect.com") returned 0x0
	[0126.179] StrStrW (lpFirst="ntuser.dat", lpSrch="autoexec.bat") returned 0x0
	[0126.179] StrStrW (lpFirst="ntuser.dat", lpSrch="desktop.ini") returned 0x0
	[0126.179] StrStrW (lpFirst="ntuser.dat", lpSrch="autorun.inf") returned 0x0
	[0126.222] StrStrW (lpFirst="ntuser.dat", lpSrch="ntuser.dat") returned="ntuser.dat"
	[0126.222] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.223] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1
	[0126.223] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.223] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.223] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.223] StrStrW (lpFirst="ntuser.dat.log", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.223] StrStrW (lpFirst="ntuser.dat.log", lpSrch="ntldr") returned 0x0
	[0126.223] StrStrW (lpFirst="ntuser.dat.log", lpSrch="pagefile.sys") returned 0x0
	[0126.223] StrStrW (lpFirst="ntuser.dat.log", lpSrch="ntdetect.com") returned 0x0
	[0126.223] StrStrW (lpFirst="ntuser.dat.log", lpSrch="autoexec.bat") returned 0x0
	[0126.223] StrStrW (lpFirst="ntuser.dat.log", lpSrch="desktop.ini") returned 0x0
	[0126.223] StrStrW (lpFirst="ntuser.dat.log", lpSrch="autorun.inf") returned 0x0
	[0126.223] StrStrW (lpFirst="ntuser.dat.log", lpSrch="ntuser.dat") returned="ntuser.dat.log"
	[0126.223] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0126.224] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0126.224] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.224] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.224] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.224] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.224] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="ntldr") returned 0x0
	[0126.224] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="pagefile.sys") returned 0x0
	[0126.224] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="ntdetect.com") returned 0x0
	[0126.224] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="autoexec.bat") returned 0x0
	[0126.224] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="desktop.ini") returned 0x0
	[0126.224] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="autorun.inf") returned 0x0
	[0126.224] StrStrW (lpFirst="ntuser.dat.log1", lpSrch="ntuser.dat") returned="ntuser.dat.log1"
	[0126.224] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0126.224] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
	[0126.225] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.225] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.225] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.225] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.225] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="ntldr") returned 0x0
	[0126.225] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="pagefile.sys") returned 0x0
	[0126.225] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="ntdetect.com") returned 0x0
	[0126.225] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="autoexec.bat") returned 0x0
	[0126.225] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="desktop.ini") returned 0x0
	[0126.225] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="autorun.inf") returned 0x0
	[0126.225] StrStrW (lpFirst="ntuser.dat.log2", lpSrch="ntuser.dat") returned="ntuser.dat.log2"
	[0126.225] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0126.225] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
	[0126.225] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.226] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xa0) returned 0x643da8
	[0126.226] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.226] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.226] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="ntldr") returned 0x0
	[0126.226] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="pagefile.sys") returned 0x0
	[0126.226] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="ntdetect.com") returned 0x0
	[0126.226] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="autoexec.bat") returned 0x0
	[0126.226] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="desktop.ini") returned 0x0
	[0126.226] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="autorun.inf") returned 0x0
	[0126.226] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf", lpSrch="ntuser.dat") returned="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"
	[0126.226] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643da8 | out: hHeap=0x5f0000) returned 1
	[0126.226] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
	[0126.226] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.226] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043320
	[0126.228] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.228] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.228] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="ntldr") returned 0x0
	[0126.228] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="pagefile.sys") returned 0x0
	[0126.228] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="ntdetect.com") returned 0x0
	[0126.228] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="autoexec.bat") returned 0x0
	[0126.228] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="desktop.ini") returned 0x0
	[0126.228] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="autorun.inf") returned 0x0
	[0126.229] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms", lpSrch="ntuser.dat") returned="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"
	[0126.229] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043320 | out: hHeap=0x5f0000) returned 1
	[0126.229] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
	[0126.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xe0) returned 0x4043320
	[0126.229] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.229] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.229] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="ntldr") returned 0x0
	[0126.229] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="pagefile.sys") returned 0x0
	[0126.229] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="ntdetect.com") returned 0x0
	[0126.229] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="autoexec.bat") returned 0x0
	[0126.229] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="desktop.ini") returned 0x0
	[0126.229] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="autorun.inf") returned 0x0
	[0126.230] StrStrW (lpFirst="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms", lpSrch="ntuser.dat") returned="ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"
	[0126.230] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x4043320 | out: hHeap=0x5f0000) returned 1
	[0126.230] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
	[0126.230] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.230] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.230] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.230] StrStrW (lpFirst="ntuser.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.230] StrStrW (lpFirst="ntuser.ini", lpSrch="ntldr") returned 0x0
	[0126.230] StrStrW (lpFirst="ntuser.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.230] StrStrW (lpFirst="ntuser.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.230] StrStrW (lpFirst="ntuser.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.230] StrStrW (lpFirst="ntuser.ini", lpSrch="desktop.ini") returned 0x0
	[0126.230] StrStrW (lpFirst="ntuser.ini", lpSrch="autorun.inf") returned 0x0
	[0126.230] StrStrW (lpFirst="ntuser.ini", lpSrch="ntuser.dat") returned 0x0
	[0126.231] StrStrW (lpFirst="ntuser.ini", lpSrch="iconcache.db") returned 0x0
	[0126.231] StrStrW (lpFirst="ntuser.ini", lpSrch="bootsect.bak") returned 0x0
	[0126.231] StrStrW (lpFirst="ntuser.ini", lpSrch="boot.ini") returned 0x0
	[0126.231] StrStrW (lpFirst="ntuser.ini", lpSrch="bootfont.bin") returned 0x0
	[0126.231] StrStrW (lpFirst="ntuser.ini", lpSrch="config.sys") returned 0x0
	[0126.231] StrStrW (lpFirst="ntuser.ini", lpSrch="io.sys") returned 0x0
	[0126.231] StrStrW (lpFirst="ntuser.ini", lpSrch="msdos.sys") returned 0x0
	[0126.231] StrStrW (lpFirst="ntuser.ini", lpSrch="ntuser.dat.log") returned 0x0
	[0126.231] StrStrW (lpFirst="ntuser.ini", lpSrch="thumbs.db") returned 0x0
	[0126.231] StrStrW (lpFirst="ntuser.ini", lpSrch="swapfile.sys") returned 0x0
	[0126.231] CreateFileW (lpFileName="C:\\\\Users\\Default\\ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3d8
	[0126.232] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x3f6ede8 | out: lpFileSize=0x3f6ede8*=20) returned 1
	[0126.232] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0126.232] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0126.247] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.247] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0126.247] CryptAcquireContextW (in: phProv=0x3f6eabc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6eabc*=0x633220) returned 1
	[0126.248] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6ead0 | out: pbBuffer=0x3f6ead0) returned 1
	[0126.248] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0126.248] ReadFile (in: hFile=0x3d8, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0126.252] GetLastError () returned 0x3e5
	[0126.252] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.252] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0126.252] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.252] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.252] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.252] lstrcmpW (lpString1="..", lpString2="Pictures") returned -1
	[0126.253] lstrcmpW (lpString1=".", lpString2="Pictures") returned -1
	[0126.253] StrStrW (lpFirst="pictures", lpSrch="programdata") returned 0x0
	[0126.253] StrStrW (lpFirst="pictures", lpSrch="$recycle.bin") returned 0x0
	[0126.253] StrStrW (lpFirst="pictures", lpSrch="program files") returned 0x0
	[0126.253] StrStrW (lpFirst="pictures", lpSrch="windows") returned 0x0
	[0126.253] StrStrW (lpFirst="pictures", lpSrch="all users") returned 0x0
	[0126.253] StrStrW (lpFirst="pictures", lpSrch="winnt") returned 0x0
	[0126.253] StrStrW (lpFirst="pictures", lpSrch="appdata") returned 0x0
	[0126.253] StrStrW (lpFirst="pictures", lpSrch="application data") returned 0x0
	[0126.253] StrStrW (lpFirst="pictures", lpSrch="local settings") returned 0x0
	[0126.253] StrStrW (lpFirst="pictures", lpSrch="boot") returned 0x0
	[0126.253] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.253] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.253] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Pictures\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0126.253] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.253] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.253] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.253] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.253] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.254] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.254] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.254] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.254] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.254] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.254] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.254] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0126.254] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.254] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.254] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.254] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.254] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.254] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.254] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.254] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.254] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0126.254] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0126.254] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.254] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.254] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.254] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.254] CreateFileW (lpFileName="C:\\\\Users\\Default\\Pictures\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\pictures\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0126.255] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0126.256] CloseHandle (hObject=0x3d8) returned 1
	[0126.256] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.256] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.256] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.256] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.256] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0126.256] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.256] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.256] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.256] lstrcmpW (lpString1="..", lpString2="PrintHood") returned -1
	[0126.257] lstrcmpW (lpString1=".", lpString2="PrintHood") returned -1
	[0126.257] StrStrW (lpFirst="printhood", lpSrch="programdata") returned 0x0
	[0126.257] StrStrW (lpFirst="printhood", lpSrch="$recycle.bin") returned 0x0
	[0126.257] StrStrW (lpFirst="printhood", lpSrch="program files") returned 0x0
	[0126.257] StrStrW (lpFirst="printhood", lpSrch="windows") returned 0x0
	[0126.257] StrStrW (lpFirst="printhood", lpSrch="all users") returned 0x0
	[0126.257] StrStrW (lpFirst="printhood", lpSrch="winnt") returned 0x0
	[0126.257] StrStrW (lpFirst="printhood", lpSrch="appdata") returned 0x0
	[0126.257] StrStrW (lpFirst="printhood", lpSrch="application data") returned 0x0
	[0126.257] StrStrW (lpFirst="printhood", lpSrch="local settings") returned 0x0
	[0126.257] StrStrW (lpFirst="printhood", lpSrch="boot") returned 0x0
	[0126.257] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.257] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.257] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\PrintHood\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="垸f諘b8")) returned 0xffffffff
	[0126.257] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.257] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.257] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.257] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0126.258] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.258] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.258] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.258] lstrcmpW (lpString1="..", lpString2="Recent") returned -1
	[0126.258] lstrcmpW (lpString1=".", lpString2="Recent") returned -1
	[0126.258] StrStrW (lpFirst="recent", lpSrch="programdata") returned 0x0
	[0126.258] StrStrW (lpFirst="recent", lpSrch="$recycle.bin") returned 0x0
	[0126.258] StrStrW (lpFirst="recent", lpSrch="program files") returned 0x0
	[0126.258] StrStrW (lpFirst="recent", lpSrch="windows") returned 0x0
	[0126.258] StrStrW (lpFirst="recent", lpSrch="all users") returned 0x0
	[0126.258] StrStrW (lpFirst="recent", lpSrch="winnt") returned 0x0
	[0126.258] StrStrW (lpFirst="recent", lpSrch="appdata") returned 0x0
	[0126.258] StrStrW (lpFirst="recent", lpSrch="application data") returned 0x0
	[0126.258] StrStrW (lpFirst="recent", lpSrch="local settings") returned 0x0
	[0126.258] StrStrW (lpFirst="recent", lpSrch="boot") returned 0x0
	[0126.258] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.258] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.258] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Recent\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="垸f諘b2")) returned 0xffffffff
	[0126.258] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.258] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.258] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.258] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0126.259] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.259] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.259] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.259] lstrcmpW (lpString1="..", lpString2="Saved Games") returned -1
	[0126.259] lstrcmpW (lpString1=".", lpString2="Saved Games") returned -1
	[0126.259] StrStrW (lpFirst="saved games", lpSrch="programdata") returned 0x0
	[0126.259] StrStrW (lpFirst="saved games", lpSrch="$recycle.bin") returned 0x0
	[0126.259] StrStrW (lpFirst="saved games", lpSrch="program files") returned 0x0
	[0126.259] StrStrW (lpFirst="saved games", lpSrch="windows") returned 0x0
	[0126.259] StrStrW (lpFirst="saved games", lpSrch="all users") returned 0x0
	[0126.259] StrStrW (lpFirst="saved games", lpSrch="winnt") returned 0x0
	[0126.259] StrStrW (lpFirst="saved games", lpSrch="appdata") returned 0x0
	[0126.259] StrStrW (lpFirst="saved games", lpSrch="application data") returned 0x0
	[0126.260] StrStrW (lpFirst="saved games", lpSrch="local settings") returned 0x0
	[0126.260] StrStrW (lpFirst="saved games", lpSrch="boot") returned 0x0
	[0126.260] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.260] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.260] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Saved Games\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0126.261] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.261] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.261] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.261] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.261] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.261] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.261] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.261] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0126.261] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.261] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.261] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.261] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.261] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.261] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.261] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.261] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.261] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.261] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.262] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.262] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.262] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.262] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.262] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0126.262] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0126.262] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.262] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.262] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.262] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.262] CreateFileW (lpFileName="C:\\\\Users\\Default\\Saved Games\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\saved games\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0126.263] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0126.264] CloseHandle (hObject=0x3d8) returned 1
	[0126.264] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.264] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.264] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.264] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.264] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0126.264] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.264] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.264] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.264] lstrcmpW (lpString1="..", lpString2="Searches") returned -1
	[0126.264] lstrcmpW (lpString1=".", lpString2="Searches") returned -1
	[0126.264] StrStrW (lpFirst="searches", lpSrch="programdata") returned 0x0
	[0126.264] StrStrW (lpFirst="searches", lpSrch="$recycle.bin") returned 0x0
	[0126.264] StrStrW (lpFirst="searches", lpSrch="program files") returned 0x0
	[0126.264] StrStrW (lpFirst="searches", lpSrch="windows") returned 0x0
	[0126.265] StrStrW (lpFirst="searches", lpSrch="all users") returned 0x0
	[0126.265] StrStrW (lpFirst="searches", lpSrch="winnt") returned 0x0
	[0126.265] StrStrW (lpFirst="searches", lpSrch="appdata") returned 0x0
	[0126.265] StrStrW (lpFirst="searches", lpSrch="application data") returned 0x0
	[0126.265] StrStrW (lpFirst="searches", lpSrch="local settings") returned 0x0
	[0126.265] StrStrW (lpFirst="searches", lpSrch="boot") returned 0x0
	[0126.265] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.265] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.265] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Searches\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0126.277] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.277] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.277] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.277] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.277] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.277] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.277] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.277] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.277] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.277] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.277] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.277] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0126.277] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.278] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.278] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.278] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.278] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.278] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.278] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.278] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.278] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0126.278] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.278] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.278] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.278] StrStrW (lpFirst="everywhere.search-ms", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.278] StrStrW (lpFirst="everywhere.search-ms", lpSrch="ntldr") returned 0x0
	[0126.278] StrStrW (lpFirst="everywhere.search-ms", lpSrch="pagefile.sys") returned 0x0
	[0126.278] StrStrW (lpFirst="everywhere.search-ms", lpSrch="ntdetect.com") returned 0x0
	[0126.278] StrStrW (lpFirst="everywhere.search-ms", lpSrch="autoexec.bat") returned 0x0
	[0126.278] StrStrW (lpFirst="everywhere.search-ms", lpSrch="desktop.ini") returned 0x0
	[0126.278] StrStrW (lpFirst="everywhere.search-ms", lpSrch="autorun.inf") returned 0x0
	[0126.278] StrStrW (lpFirst="everywhere.search-ms", lpSrch="ntuser.dat") returned 0x0
	[0126.278] StrStrW (lpFirst="everywhere.search-ms", lpSrch="iconcache.db") returned 0x0
	[0126.279] StrStrW (lpFirst="everywhere.search-ms", lpSrch="bootsect.bak") returned 0x0
	[0126.279] StrStrW (lpFirst="everywhere.search-ms", lpSrch="boot.ini") returned 0x0
	[0126.279] StrStrW (lpFirst="everywhere.search-ms", lpSrch="bootfont.bin") returned 0x0
	[0126.279] StrStrW (lpFirst="everywhere.search-ms", lpSrch="config.sys") returned 0x0
	[0126.279] StrStrW (lpFirst="everywhere.search-ms", lpSrch="io.sys") returned 0x0
	[0126.279] StrStrW (lpFirst="everywhere.search-ms", lpSrch="msdos.sys") returned 0x0
	[0126.279] StrStrW (lpFirst="everywhere.search-ms", lpSrch="ntuser.dat.log") returned 0x0
	[0126.279] StrStrW (lpFirst="everywhere.search-ms", lpSrch="thumbs.db") returned 0x0
	[0126.279] StrStrW (lpFirst="everywhere.search-ms", lpSrch="swapfile.sys") returned 0x0
	[0126.279] SetFileAttributesW (lpFileName="C:\\\\Users\\Default\\Searches\\Everywhere.search-ms", dwFileAttributes=0x22) returned 1
	[0126.280] CreateFileW (lpFileName="C:\\\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0126.280] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=248) returned 1
	[0126.280] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0126.281] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0126.293] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0126.293] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0126.293] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0126.294] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0126.294] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0126.294] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0126.298] GetLastError () returned 0x3e5
	[0126.298] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.298] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
	[0126.298] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.299] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0126.299] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="ntldr") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="pagefile.sys") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="ntdetect.com") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="autoexec.bat") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="desktop.ini") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="autorun.inf") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="ntuser.dat") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="iconcache.db") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="bootsect.bak") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="boot.ini") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="bootfont.bin") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="config.sys") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="io.sys") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="msdos.sys") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="ntuser.dat.log") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="thumbs.db") returned 0x0
	[0126.299] StrStrW (lpFirst="indexed locations.search-ms", lpSrch="swapfile.sys") returned 0x0
	[0126.300] SetFileAttributesW (lpFileName="C:\\\\Users\\Default\\Searches\\Indexed Locations.search-ms", dwFileAttributes=0x22) returned 1
	[0126.300] CreateFileW (lpFileName="C:\\\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0126.300] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=248) returned 1
	[0126.300] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0126.300] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0126.312] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0126.312] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0126.312] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0126.313] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0126.313] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0126.313] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0126.318] GetLastError () returned 0x3e5
	[0126.318] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0126.318] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexed locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0
	[0126.318] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0126.318] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.318] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.318] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.318] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.318] CreateFileW (lpFileName="C:\\\\Users\\Default\\Searches\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\searches\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0126.319] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0126.320] CloseHandle (hObject=0x3d8) returned 1
	[0126.320] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.320] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.320] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.320] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.320] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0126.321] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.321] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.321] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.321] lstrcmpW (lpString1="..", lpString2="SendTo") returned -1
	[0126.321] lstrcmpW (lpString1=".", lpString2="SendTo") returned -1
	[0126.321] StrStrW (lpFirst="sendto", lpSrch="programdata") returned 0x0
	[0126.321] StrStrW (lpFirst="sendto", lpSrch="$recycle.bin") returned 0x0
	[0126.321] StrStrW (lpFirst="sendto", lpSrch="program files") returned 0x0
	[0126.321] StrStrW (lpFirst="sendto", lpSrch="windows") returned 0x0
	[0126.321] StrStrW (lpFirst="sendto", lpSrch="all users") returned 0x0
	[0126.321] StrStrW (lpFirst="sendto", lpSrch="winnt") returned 0x0
	[0126.321] StrStrW (lpFirst="sendto", lpSrch="appdata") returned 0x0
	[0126.321] StrStrW (lpFirst="sendto", lpSrch="application data") returned 0x0
	[0126.322] StrStrW (lpFirst="sendto", lpSrch="local settings") returned 0x0
	[0126.322] StrStrW (lpFirst="sendto", lpSrch="boot") returned 0x0
	[0126.322] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.322] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.322] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\SendTo\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexed locations.search-ms", cAlternateFileName="垸f諘b2")) returned 0xffffffff
	[0126.322] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.322] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.322] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.322] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0126.322] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.322] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.322] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.322] lstrcmpW (lpString1="..", lpString2="Start Menu") returned -1
	[0126.322] lstrcmpW (lpString1=".", lpString2="Start Menu") returned -1
	[0126.322] StrStrW (lpFirst="start menu", lpSrch="programdata") returned 0x0
	[0126.322] StrStrW (lpFirst="start menu", lpSrch="$recycle.bin") returned 0x0
	[0126.322] StrStrW (lpFirst="start menu", lpSrch="program files") returned 0x0
	[0126.322] StrStrW (lpFirst="start menu", lpSrch="windows") returned 0x0
	[0126.322] StrStrW (lpFirst="start menu", lpSrch="all users") returned 0x0
	[0126.323] StrStrW (lpFirst="start menu", lpSrch="winnt") returned 0x0
	[0126.323] StrStrW (lpFirst="start menu", lpSrch="appdata") returned 0x0
	[0126.323] StrStrW (lpFirst="start menu", lpSrch="application data") returned 0x0
	[0126.323] StrStrW (lpFirst="start menu", lpSrch="local settings") returned 0x0
	[0126.323] StrStrW (lpFirst="start menu", lpSrch="boot") returned 0x0
	[0126.323] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.323] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.323] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Start Menu\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexed locations.search-ms", cAlternateFileName="垸f諘b:")) returned 0xffffffff
	[0126.323] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.323] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.323] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.323] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0126.323] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.323] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.323] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.323] lstrcmpW (lpString1="..", lpString2="Templates") returned -1
	[0126.323] lstrcmpW (lpString1=".", lpString2="Templates") returned -1
	[0126.323] StrStrW (lpFirst="templates", lpSrch="programdata") returned 0x0
	[0126.323] StrStrW (lpFirst="templates", lpSrch="$recycle.bin") returned 0x0
	[0126.323] StrStrW (lpFirst="templates", lpSrch="program files") returned 0x0
	[0126.323] StrStrW (lpFirst="templates", lpSrch="windows") returned 0x0
	[0126.324] StrStrW (lpFirst="templates", lpSrch="all users") returned 0x0
	[0126.324] StrStrW (lpFirst="templates", lpSrch="winnt") returned 0x0
	[0126.324] StrStrW (lpFirst="templates", lpSrch="appdata") returned 0x0
	[0126.324] StrStrW (lpFirst="templates", lpSrch="application data") returned 0x0
	[0126.324] StrStrW (lpFirst="templates", lpSrch="local settings") returned 0x0
	[0126.324] StrStrW (lpFirst="templates", lpSrch="boot") returned 0x0
	[0126.324] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.324] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.324] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Templates\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexed locations.search-ms", cAlternateFileName="垸f諘b8")) returned 0xffffffff
	[0126.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.324] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0126.324] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.324] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.324] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.324] lstrcmpW (lpString1="..", lpString2="Videos") returned -1
	[0126.324] lstrcmpW (lpString1=".", lpString2="Videos") returned -1
	[0126.324] StrStrW (lpFirst="videos", lpSrch="programdata") returned 0x0
	[0126.325] StrStrW (lpFirst="videos", lpSrch="$recycle.bin") returned 0x0
	[0126.325] StrStrW (lpFirst="videos", lpSrch="program files") returned 0x0
	[0126.325] StrStrW (lpFirst="videos", lpSrch="windows") returned 0x0
	[0126.325] StrStrW (lpFirst="videos", lpSrch="all users") returned 0x0
	[0126.325] StrStrW (lpFirst="videos", lpSrch="winnt") returned 0x0
	[0126.325] StrStrW (lpFirst="videos", lpSrch="appdata") returned 0x0
	[0126.325] StrStrW (lpFirst="videos", lpSrch="application data") returned 0x0
	[0126.325] StrStrW (lpFirst="videos", lpSrch="local settings") returned 0x0
	[0126.325] StrStrW (lpFirst="videos", lpSrch="boot") returned 0x0
	[0126.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.325] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default\\Videos\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0126.326] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.326] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.326] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.326] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.326] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.326] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.326] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.326] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.326] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.326] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.326] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.326] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0126.326] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.326] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.326] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.326] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.326] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.326] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.326] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.326] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.326] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0126.326] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0126.327] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.327] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.327] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.327] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.327] CreateFileW (lpFileName="C:\\\\Users\\Default\\Videos\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\videos\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0126.327] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0126.328] CloseHandle (hObject=0x3d8) returned 1
	[0126.328] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.328] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.328] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.328] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.328] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="videos", cAlternateFileName="")) returned 0
	[0126.328] FindClose (in: hFindFile=0x61e910 | out: hFindFile=0x61e910) returned 1
	[0126.329] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.329] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520210
	[0126.329] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.329] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520210 | out: hHeap=0x5f0000) returned 1
	[0126.329] CreateFileW (lpFileName="C:\\\\Users\\Default\\read_me_lkdtt.txt" (normalized: "c:\\users\\default\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3a4
	[0126.329] WriteFile (in: hFile=0x3a4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eea4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eea4*=0x512, lpOverlapped=0x0) returned 1
	[0126.330] CloseHandle (hObject=0x3a4) returned 1
	[0126.330] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0126.330] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.330] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0126.330] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0126.330] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x16000016, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1
	[0126.330] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0126.330] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0126.330] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0126.330] lstrcmpW (lpString1="..", lpString2="Default User") returned -1
	[0126.331] lstrcmpW (lpString1=".", lpString2="Default User") returned -1
	[0126.331] StrStrW (lpFirst="default user", lpSrch="programdata") returned 0x0
	[0126.331] StrStrW (lpFirst="default user", lpSrch="$recycle.bin") returned 0x0
	[0126.331] StrStrW (lpFirst="default user", lpSrch="program files") returned 0x0
	[0126.331] StrStrW (lpFirst="default user", lpSrch="windows") returned 0x0
	[0126.331] StrStrW (lpFirst="default user", lpSrch="all users") returned 0x0
	[0126.331] StrStrW (lpFirst="default user", lpSrch="winnt") returned 0x0
	[0126.331] StrStrW (lpFirst="default user", lpSrch="appdata") returned 0x0
	[0126.331] StrStrW (lpFirst="default user", lpSrch="application data") returned 0x0
	[0126.331] StrStrW (lpFirst="default user", lpSrch="local settings") returned 0x0
	[0126.331] StrStrW (lpFirst="default user", lpSrch="boot") returned 0x0
	[0126.331] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0126.331] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.331] FindFirstFileW (in: lpFileName="C:\\\\Users\\Default User\\*", lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="videos", cAlternateFileName="ø͒Ơ͒.")) returned 0xffffffff
	[0126.331] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.331] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0126.331] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0126.331] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x16000016, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.331] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0126.331] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0126.331] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0126.332] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.332] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.332] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.332] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.332] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.332] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.332] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0126.332] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x16000016, cFileName="Public", cAlternateFileName="")) returned 1
	[0126.332] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fc0
	[0126.332] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0126.332] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fc0 | out: hHeap=0x5f0000) returned 1
	[0126.332] lstrcmpW (lpString1="..", lpString2="Public") returned -1
	[0126.332] lstrcmpW (lpString1=".", lpString2="Public") returned -1
	[0126.332] StrStrW (lpFirst="public", lpSrch="programdata") returned 0x0
	[0126.332] StrStrW (lpFirst="public", lpSrch="$recycle.bin") returned 0x0
	[0126.332] StrStrW (lpFirst="public", lpSrch="program files") returned 0x0
	[0126.332] StrStrW (lpFirst="public", lpSrch="windows") returned 0x0
	[0126.332] StrStrW (lpFirst="public", lpSrch="all users") returned 0x0
	[0126.332] StrStrW (lpFirst="public", lpSrch="winnt") returned 0x0
	[0126.332] StrStrW (lpFirst="public", lpSrch="appdata") returned 0x0
	[0126.332] StrStrW (lpFirst="public", lpSrch="application data") returned 0x0
	[0126.332] StrStrW (lpFirst="public", lpSrch="local settings") returned 0x0
	[0126.332] StrStrW (lpFirst="public", lpSrch="boot") returned 0x0
	[0126.332] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35200f8
	[0126.333] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.333] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\*", lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e910
	[0126.333] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.333] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.333] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.333] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.333] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.333] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.333] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.333] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.333] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.333] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0126.333] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.333] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.333] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.333] lstrcmpW (lpString1="..", lpString2="Desktop") returned -1
	[0126.333] lstrcmpW (lpString1=".", lpString2="Desktop") returned -1
	[0126.333] StrStrW (lpFirst="desktop", lpSrch="programdata") returned 0x0
	[0126.334] StrStrW (lpFirst="desktop", lpSrch="$recycle.bin") returned 0x0
	[0126.334] StrStrW (lpFirst="desktop", lpSrch="program files") returned 0x0
	[0126.334] StrStrW (lpFirst="desktop", lpSrch="windows") returned 0x0
	[0126.334] StrStrW (lpFirst="desktop", lpSrch="all users") returned 0x0
	[0126.334] StrStrW (lpFirst="desktop", lpSrch="winnt") returned 0x0
	[0126.334] StrStrW (lpFirst="desktop", lpSrch="appdata") returned 0x0
	[0126.334] StrStrW (lpFirst="desktop", lpSrch="application data") returned 0x0
	[0126.334] StrStrW (lpFirst="desktop", lpSrch="local settings") returned 0x0
	[0126.334] StrStrW (lpFirst="desktop", lpSrch="boot") returned 0x0
	[0126.334] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.334] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.334] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Desktop\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0126.334] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.334] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.334] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.334] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.334] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.334] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.334] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.334] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.334] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.334] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1
	[0126.334] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.334] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.334] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="ntldr") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="pagefile.sys") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="ntdetect.com") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="autoexec.bat") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="desktop.ini") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="autorun.inf") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="ntuser.dat") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="iconcache.db") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="bootsect.bak") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="boot.ini") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="bootfont.bin") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="config.sys") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="io.sys") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="msdos.sys") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="ntuser.dat.log") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="thumbs.db") returned 0x0
	[0126.335] StrStrW (lpFirst="adobe reader x.lnk", lpSrch="swapfile.sys") returned 0x0
	[0126.335] CreateFileW (lpFileName="C:\\\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0126.336] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=2025) returned 1
	[0126.337] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0126.337] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0126.347] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0126.347] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0126.347] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0126.348] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0126.348] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0126.349] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0126.357] GetLastError () returned 0x3e5
	[0126.357] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.357] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.357] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.357] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0126.357] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.357] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.357] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.358] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.358] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.358] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.358] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.358] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.358] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0126.358] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.358] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.358] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="ntldr") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="pagefile.sys") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="ntdetect.com") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="autoexec.bat") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="desktop.ini") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="autorun.inf") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="ntuser.dat") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="iconcache.db") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="bootsect.bak") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="boot.ini") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="bootfont.bin") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="config.sys") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="io.sys") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="msdos.sys") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="ntuser.dat.log") returned 0x0
	[0126.358] StrStrW (lpFirst="google chrome.lnk", lpSrch="thumbs.db") returned 0x0
	[0126.359] StrStrW (lpFirst="google chrome.lnk", lpSrch="swapfile.sys") returned 0x0
	[0126.359] CreateFileW (lpFileName="C:\\\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0126.359] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=2257) returned 1
	[0126.359] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0126.359] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0126.427] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0126.427] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0126.427] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0126.428] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0126.428] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0126.428] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0126.435] GetLastError () returned 0x3e5
	[0126.435] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.435] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1
	[0126.435] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.435] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.435] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.435] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.435] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="ntldr") returned 0x0
	[0126.435] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="pagefile.sys") returned 0x0
	[0126.435] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="ntdetect.com") returned 0x0
	[0126.435] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="autoexec.bat") returned 0x0
	[0126.435] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="desktop.ini") returned 0x0
	[0126.435] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="autorun.inf") returned 0x0
	[0126.435] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="ntuser.dat") returned 0x0
	[0126.435] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="iconcache.db") returned 0x0
	[0126.436] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="bootsect.bak") returned 0x0
	[0126.436] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="boot.ini") returned 0x0
	[0126.436] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="bootfont.bin") returned 0x0
	[0126.436] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="config.sys") returned 0x0
	[0126.436] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="io.sys") returned 0x0
	[0126.436] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="msdos.sys") returned 0x0
	[0126.436] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="ntuser.dat.log") returned 0x0
	[0126.436] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="thumbs.db") returned 0x0
	[0126.436] StrStrW (lpFirst="mozilla firefox.lnk", lpSrch="swapfile.sys") returned 0x0
	[0126.436] CreateFileW (lpFileName="C:\\\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0126.436] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=1157) returned 1
	[0126.436] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0126.436] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0126.451] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0126.451] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0126.451] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0126.452] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0126.452] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0126.452] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 0
	[0126.456] GetLastError () returned 0x3e5
	[0126.456] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.456] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozilla firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0
	[0126.456] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0126.456] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.456] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.456] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.456] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.456] CreateFileW (lpFileName="C:\\\\Users\\Public\\Desktop\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\desktop\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0126.457] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0126.458] CloseHandle (hObject=0x3d8) returned 1
	[0126.459] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.459] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.459] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.459] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.459] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.459] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.459] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.459] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.459] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.459] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.459] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.459] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.459] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.459] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.459] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.459] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0126.459] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.459] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.459] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.459] lstrcmpW (lpString1="..", lpString2="Documents") returned -1
	[0126.459] lstrcmpW (lpString1=".", lpString2="Documents") returned -1
	[0126.459] StrStrW (lpFirst="documents", lpSrch="programdata") returned 0x0
	[0126.459] StrStrW (lpFirst="documents", lpSrch="$recycle.bin") returned 0x0
	[0126.459] StrStrW (lpFirst="documents", lpSrch="program files") returned 0x0
	[0126.459] StrStrW (lpFirst="documents", lpSrch="windows") returned 0x0
	[0126.459] StrStrW (lpFirst="documents", lpSrch="all users") returned 0x0
	[0126.460] StrStrW (lpFirst="documents", lpSrch="winnt") returned 0x0
	[0126.460] StrStrW (lpFirst="documents", lpSrch="appdata") returned 0x0
	[0126.460] StrStrW (lpFirst="documents", lpSrch="application data") returned 0x0
	[0126.460] StrStrW (lpFirst="documents", lpSrch="local settings") returned 0x0
	[0126.460] StrStrW (lpFirst="documents", lpSrch="boot") returned 0x0
	[0126.460] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.460] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.460] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Documents\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0126.460] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.460] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.460] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.460] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.460] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.460] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.460] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.460] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.460] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.460] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.460] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.460] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0126.460] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.460] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.460] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.462] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.462] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.462] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.462] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.462] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.462] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0126.462] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.462] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0126.462] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.462] lstrcmpW (lpString1="..", lpString2="My Music") returned -1
	[0126.462] lstrcmpW (lpString1=".", lpString2="My Music") returned -1
	[0126.462] StrStrW (lpFirst="my music", lpSrch="programdata") returned 0x0
	[0126.462] StrStrW (lpFirst="my music", lpSrch="$recycle.bin") returned 0x0
	[0126.462] StrStrW (lpFirst="my music", lpSrch="program files") returned 0x0
	[0126.462] StrStrW (lpFirst="my music", lpSrch="windows") returned 0x0
	[0126.462] StrStrW (lpFirst="my music", lpSrch="all users") returned 0x0
	[0126.462] StrStrW (lpFirst="my music", lpSrch="winnt") returned 0x0
	[0126.462] StrStrW (lpFirst="my music", lpSrch="appdata") returned 0x0
	[0126.462] StrStrW (lpFirst="my music", lpSrch="application data") returned 0x0
	[0126.462] StrStrW (lpFirst="my music", lpSrch="local settings") returned 0x0
	[0126.462] StrStrW (lpFirst="my music", lpSrch="boot") returned 0x0
	[0126.462] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.463] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0126.463] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x11, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䮸d勸cH")) returned 0xffffffff
	[0126.463] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0126.463] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0126.463] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.463] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0126.463] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.463] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0126.463] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.463] lstrcmpW (lpString1="..", lpString2="My Pictures") returned -1
	[0126.463] lstrcmpW (lpString1=".", lpString2="My Pictures") returned -1
	[0126.463] StrStrW (lpFirst="my pictures", lpSrch="programdata") returned 0x0
	[0126.463] StrStrW (lpFirst="my pictures", lpSrch="$recycle.bin") returned 0x0
	[0126.463] StrStrW (lpFirst="my pictures", lpSrch="program files") returned 0x0
	[0126.463] StrStrW (lpFirst="my pictures", lpSrch="windows") returned 0x0
	[0126.463] StrStrW (lpFirst="my pictures", lpSrch="all users") returned 0x0
	[0126.463] StrStrW (lpFirst="my pictures", lpSrch="winnt") returned 0x0
	[0126.463] StrStrW (lpFirst="my pictures", lpSrch="appdata") returned 0x0
	[0126.463] StrStrW (lpFirst="my pictures", lpSrch="application data") returned 0x0
	[0126.463] StrStrW (lpFirst="my pictures", lpSrch="local settings") returned 0x0
	[0126.463] StrStrW (lpFirst="my pictures", lpSrch="boot") returned 0x0
	[0126.463] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.464] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0126.464] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x11, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䮸d勸cN")) returned 0xffffffff
	[0126.464] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0126.464] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0126.464] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.464] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0126.464] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.464] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0126.464] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.464] lstrcmpW (lpString1="..", lpString2="My Videos") returned -1
	[0126.464] lstrcmpW (lpString1=".", lpString2="My Videos") returned -1
	[0126.464] StrStrW (lpFirst="my videos", lpSrch="programdata") returned 0x0
	[0126.464] StrStrW (lpFirst="my videos", lpSrch="$recycle.bin") returned 0x0
	[0126.464] StrStrW (lpFirst="my videos", lpSrch="program files") returned 0x0
	[0126.464] StrStrW (lpFirst="my videos", lpSrch="windows") returned 0x0
	[0126.464] StrStrW (lpFirst="my videos", lpSrch="all users") returned 0x0
	[0126.464] StrStrW (lpFirst="my videos", lpSrch="winnt") returned 0x0
	[0126.464] StrStrW (lpFirst="my videos", lpSrch="appdata") returned 0x0
	[0126.464] StrStrW (lpFirst="my videos", lpSrch="application data") returned 0x0
	[0126.464] StrStrW (lpFirst="my videos", lpSrch="local settings") returned 0x0
	[0126.464] StrStrW (lpFirst="my videos", lpSrch="boot") returned 0x0
	[0126.464] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.464] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0126.464] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x11, ftLastAccessTime.dwHighDateTime=0x2, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="䮸d勸cJ")) returned 0xffffffff
	[0126.465] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0126.465] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0126.465] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.465] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="my videos", cAlternateFileName="MYVIDE~1")) returned 0
	[0126.465] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0126.465] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.465] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.465] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.465] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.465] CreateFileW (lpFileName="C:\\\\Users\\Public\\Documents\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\documents\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0126.466] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0126.466] CloseHandle (hObject=0x3d8) returned 1
	[0126.467] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.467] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.467] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.467] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.467] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0126.467] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.467] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.467] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.467] lstrcmpW (lpString1="..", lpString2="Downloads") returned -1
	[0126.467] lstrcmpW (lpString1=".", lpString2="Downloads") returned -1
	[0126.467] StrStrW (lpFirst="downloads", lpSrch="programdata") returned 0x0
	[0126.467] StrStrW (lpFirst="downloads", lpSrch="$recycle.bin") returned 0x0
	[0126.467] StrStrW (lpFirst="downloads", lpSrch="program files") returned 0x0
	[0126.467] StrStrW (lpFirst="downloads", lpSrch="windows") returned 0x0
	[0126.467] StrStrW (lpFirst="downloads", lpSrch="all users") returned 0x0
	[0126.467] StrStrW (lpFirst="downloads", lpSrch="winnt") returned 0x0
	[0126.467] StrStrW (lpFirst="downloads", lpSrch="appdata") returned 0x0
	[0126.467] StrStrW (lpFirst="downloads", lpSrch="application data") returned 0x0
	[0126.467] StrStrW (lpFirst="downloads", lpSrch="local settings") returned 0x0
	[0126.467] StrStrW (lpFirst="downloads", lpSrch="boot") returned 0x0
	[0126.467] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.467] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.467] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Downloads\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0126.468] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.468] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.468] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.468] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.468] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.468] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.468] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.468] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.468] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.468] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.468] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.468] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0126.468] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.468] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.468] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.468] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.468] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.468] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.468] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.468] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.468] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0126.468] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0126.469] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.469] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.469] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.469] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.469] CreateFileW (lpFileName="C:\\\\Users\\Public\\Downloads\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\downloads\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0126.473] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0126.474] CloseHandle (hObject=0x3d8) returned 1
	[0126.474] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.474] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.474] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.474] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.474] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0126.474] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.474] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.475] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.475] lstrcmpW (lpString1="..", lpString2="Favorites") returned -1
	[0126.475] lstrcmpW (lpString1=".", lpString2="Favorites") returned -1
	[0126.475] StrStrW (lpFirst="favorites", lpSrch="programdata") returned 0x0
	[0126.475] StrStrW (lpFirst="favorites", lpSrch="$recycle.bin") returned 0x0
	[0126.475] StrStrW (lpFirst="favorites", lpSrch="program files") returned 0x0
	[0126.475] StrStrW (lpFirst="favorites", lpSrch="windows") returned 0x0
	[0126.475] StrStrW (lpFirst="favorites", lpSrch="all users") returned 0x0
	[0126.475] StrStrW (lpFirst="favorites", lpSrch="winnt") returned 0x0
	[0126.475] StrStrW (lpFirst="favorites", lpSrch="appdata") returned 0x0
	[0126.475] StrStrW (lpFirst="favorites", lpSrch="application data") returned 0x0
	[0126.475] StrStrW (lpFirst="favorites", lpSrch="local settings") returned 0x0
	[0126.475] StrStrW (lpFirst="favorites", lpSrch="boot") returned 0x0
	[0126.475] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.475] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.475] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Favorites\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0126.476] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.476] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.476] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.476] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.476] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.476] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.698] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.698] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.698] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.698] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0126.698] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0126.699] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.699] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.699] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.699] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.699] CreateFileW (lpFileName="C:\\\\Users\\Public\\Favorites\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\favorites\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0126.700] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0126.701] CloseHandle (hObject=0x3d8) returned 1
	[0126.701] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.701] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.701] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.701] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.701] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0126.702] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.702] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.702] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.702] lstrcmpW (lpString1="..", lpString2="Libraries") returned -1
	[0126.702] lstrcmpW (lpString1=".", lpString2="Libraries") returned -1
	[0126.702] StrStrW (lpFirst="libraries", lpSrch="programdata") returned 0x0
	[0126.702] StrStrW (lpFirst="libraries", lpSrch="$recycle.bin") returned 0x0
	[0126.702] StrStrW (lpFirst="libraries", lpSrch="program files") returned 0x0
	[0126.702] StrStrW (lpFirst="libraries", lpSrch="windows") returned 0x0
	[0126.702] StrStrW (lpFirst="libraries", lpSrch="all users") returned 0x0
	[0126.702] StrStrW (lpFirst="libraries", lpSrch="winnt") returned 0x0
	[0126.702] StrStrW (lpFirst="libraries", lpSrch="appdata") returned 0x0
	[0126.702] StrStrW (lpFirst="libraries", lpSrch="application data") returned 0x0
	[0126.703] StrStrW (lpFirst="libraries", lpSrch="local settings") returned 0x0
	[0126.703] StrStrW (lpFirst="libraries", lpSrch="boot") returned 0x0
	[0126.703] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.703] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.703] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Libraries\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0126.703] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.704] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.704] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.704] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.704] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.704] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.704] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.704] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.704] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.704] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.704] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.704] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6352f8
	[0126.704] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.704] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.705] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.705] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.705] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.705] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.705] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.705] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.705] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1
	[0126.705] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.705] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0126.705] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.705] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.705] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="ntldr") returned 0x0
	[0126.706] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="pagefile.sys") returned 0x0
	[0126.706] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="ntdetect.com") returned 0x0
	[0126.706] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="autoexec.bat") returned 0x0
	[0126.706] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="desktop.ini") returned 0x0
	[0126.706] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="autorun.inf") returned 0x0
	[0126.706] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="ntuser.dat") returned 0x0
	[0126.706] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="iconcache.db") returned 0x0
	[0126.706] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="bootsect.bak") returned 0x0
	[0126.706] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="boot.ini") returned 0x0
	[0126.706] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="bootfont.bin") returned 0x0
	[0126.706] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="config.sys") returned 0x0
	[0126.707] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="io.sys") returned 0x0
	[0126.707] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="msdos.sys") returned 0x0
	[0126.707] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="ntuser.dat.log") returned 0x0
	[0126.707] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="thumbs.db") returned 0x0
	[0126.707] StrStrW (lpFirst="recordedtv.library-ms", lpSrch="swapfile.sys") returned 0x0
	[0126.707] CreateFileW (lpFileName="C:\\\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0126.708] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6eab8 | out: lpFileSize=0x3f6eab8*=876) returned 1
	[0126.708] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0126.708] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0126.725] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0126.725] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0126.725] CryptAcquireContextW (in: phProv=0x3f6e78c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e78c*=0x633220) returned 1
	[0126.727] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e7a0 | out: pbBuffer=0x3f6e7a0) returned 1
	[0126.727] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0126.727] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0126.731] GetLastError () returned 0x3e5
	[0126.731] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35264f0 | out: hHeap=0x5f0000) returned 1
	[0126.731] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="recordedtv.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0
	[0126.731] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0126.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0126.731] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.731] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0126.732] CreateFileW (lpFileName="C:\\\\Users\\Public\\Libraries\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\libraries\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0126.734] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0126.735] CloseHandle (hObject=0x3d8) returned 1
	[0126.736] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6352f8 | out: hHeap=0x5f0000) returned 1
	[0126.736] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0126.736] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.736] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.736] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0126.736] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0126.736] lstrcmpW (lpString1="..", lpString2="Music") returned -1
	[0126.736] lstrcmpW (lpString1=".", lpString2="Music") returned -1
	[0126.736] StrStrW (lpFirst="music", lpSrch="programdata") returned 0x0
	[0126.736] StrStrW (lpFirst="music", lpSrch="$recycle.bin") returned 0x0
	[0126.736] StrStrW (lpFirst="music", lpSrch="program files") returned 0x0
	[0126.736] StrStrW (lpFirst="music", lpSrch="windows") returned 0x0
	[0126.736] StrStrW (lpFirst="music", lpSrch="all users") returned 0x0
	[0126.736] StrStrW (lpFirst="music", lpSrch="winnt") returned 0x0
	[0126.736] StrStrW (lpFirst="music", lpSrch="appdata") returned 0x0
	[0126.736] StrStrW (lpFirst="music", lpSrch="application data") returned 0x0
	[0126.736] StrStrW (lpFirst="music", lpSrch="local settings") returned 0x0
	[0126.737] StrStrW (lpFirst="music", lpSrch="boot") returned 0x0
	[0126.737] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520210
	[0126.737] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0126.737] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Music\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0126.737] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0126.737] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520248
	[0126.737] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.737] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520248 | out: hHeap=0x5f0000) returned 1
	[0126.737] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.737] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.737] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.737] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.737] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520248
	[0126.737] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0126.737] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520248 | out: hHeap=0x5f0000) returned 1
	[0126.737] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.738] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0126.738] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.738] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520248
	[0126.738] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.738] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520248 | out: hHeap=0x5f0000) returned 1
	[0126.738] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.738] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.738] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.738] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.738] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.738] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.738] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0126.738] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1
	[0126.738] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520248
	[0126.738] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0126.738] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520248 | out: hHeap=0x5f0000) returned 1
	[0126.738] lstrcmpW (lpString1="..", lpString2="Sample Music") returned -1
	[0126.738] lstrcmpW (lpString1=".", lpString2="Sample Music") returned -1
	[0126.738] StrStrW (lpFirst="sample music", lpSrch="programdata") returned 0x0
	[0126.739] StrStrW (lpFirst="sample music", lpSrch="$recycle.bin") returned 0x0
	[0126.739] StrStrW (lpFirst="sample music", lpSrch="program files") returned 0x0
	[0126.739] StrStrW (lpFirst="sample music", lpSrch="windows") returned 0x0
	[0126.739] StrStrW (lpFirst="sample music", lpSrch="all users") returned 0x0
	[0126.739] StrStrW (lpFirst="sample music", lpSrch="winnt") returned 0x0
	[0126.739] StrStrW (lpFirst="sample music", lpSrch="appdata") returned 0x0
	[0126.739] StrStrW (lpFirst="sample music", lpSrch="application data") returned 0x0
	[0126.739] StrStrW (lpFirst="sample music", lpSrch="local settings") returned 0x0
	[0126.739] StrStrW (lpFirst="sample music", lpSrch="boot") returned 0x0
	[0126.739] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0126.739] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e78
	[0126.739] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0126.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e78 | out: hHeap=0x5f0000) returned 1
	[0126.785] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e78
	[0126.785] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0126.785] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0126.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e78 | out: hHeap=0x5f0000) returned 1
	[0126.785] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.785] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e78
	[0126.785] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0126.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e78 | out: hHeap=0x5f0000) returned 1
	[0126.785] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0126.785] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e78
	[0126.785] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0126.785] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e78 | out: hHeap=0x5f0000) returned 1
	[0126.785] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.785] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0126.785] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0126.786] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0126.786] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0126.786] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0126.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0126.786] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1
	[0126.786] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e78
	[0126.786] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0126.786] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e78 | out: hHeap=0x5f0000) returned 1
	[0126.786] StrStrW (lpFirst="kalimba.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.786] StrStrW (lpFirst="kalimba.mp3", lpSrch="ntldr") returned 0x0
	[0126.786] StrStrW (lpFirst="kalimba.mp3", lpSrch="pagefile.sys") returned 0x0
	[0126.786] StrStrW (lpFirst="kalimba.mp3", lpSrch="ntdetect.com") returned 0x0
	[0126.786] StrStrW (lpFirst="kalimba.mp3", lpSrch="autoexec.bat") returned 0x0
	[0126.786] StrStrW (lpFirst="kalimba.mp3", lpSrch="desktop.ini") returned 0x0
	[0126.786] StrStrW (lpFirst="kalimba.mp3", lpSrch="autorun.inf") returned 0x0
	[0126.786] StrStrW (lpFirst="kalimba.mp3", lpSrch="ntuser.dat") returned 0x0
	[0126.786] StrStrW (lpFirst="kalimba.mp3", lpSrch="iconcache.db") returned 0x0
	[0126.786] StrStrW (lpFirst="kalimba.mp3", lpSrch="bootsect.bak") returned 0x0
	[0126.787] StrStrW (lpFirst="kalimba.mp3", lpSrch="boot.ini") returned 0x0
	[0126.787] StrStrW (lpFirst="kalimba.mp3", lpSrch="bootfont.bin") returned 0x0
	[0126.787] StrStrW (lpFirst="kalimba.mp3", lpSrch="config.sys") returned 0x0
	[0126.787] StrStrW (lpFirst="kalimba.mp3", lpSrch="io.sys") returned 0x0
	[0126.787] StrStrW (lpFirst="kalimba.mp3", lpSrch="msdos.sys") returned 0x0
	[0126.787] StrStrW (lpFirst="kalimba.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0126.787] StrStrW (lpFirst="kalimba.mp3", lpSrch="thumbs.db") returned 0x0
	[0126.787] StrStrW (lpFirst="kalimba.mp3", lpSrch="swapfile.sys") returned 0x0
	[0126.787] CreateFileW (lpFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0126.791] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=8414449) returned 1
	[0126.791] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0126.791] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0126.805] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6352f8
	[0126.805] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0126.805] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0126.806] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0126.806] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0126.806] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0126.817] GetLastError () returned 0x3e5
	[0126.817] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0126.817] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1
	[0126.817] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e78
	[0126.817] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0126.817] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e78 | out: hHeap=0x5f0000) returned 1
	[0126.817] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="ntldr") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="pagefile.sys") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="ntdetect.com") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="autoexec.bat") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="desktop.ini") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="autorun.inf") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="ntuser.dat") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="iconcache.db") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="bootsect.bak") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="boot.ini") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="bootfont.bin") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="config.sys") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="io.sys") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="msdos.sys") returned 0x0
	[0126.818] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0126.819] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="thumbs.db") returned 0x0
	[0126.819] StrStrW (lpFirst="maid with the flaxen hair.mp3", lpSrch="swapfile.sys") returned 0x0
	[0126.819] CreateFileW (lpFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x378
	[0126.819] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=4113874) returned 1
	[0126.820] CreateIoCompletionPort (FileHandle=0x378, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0126.820] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0126.834] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x63a0f8
	[0126.834] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0126.834] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0126.835] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0126.835] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0126.835] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0127.002] GetLastError () returned 0x3e5
	[0127.002] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0127.002] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1
	[0127.002] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e78
	[0127.002] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0127.002] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e78 | out: hHeap=0x5f0000) returned 1
	[0127.002] StrStrW (lpFirst="sleep away.mp3", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="ntldr") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="pagefile.sys") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="ntdetect.com") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="autoexec.bat") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="desktop.ini") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="autorun.inf") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="ntuser.dat") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="iconcache.db") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="bootsect.bak") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="boot.ini") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="bootfont.bin") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="config.sys") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="io.sys") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="msdos.sys") returned 0x0
	[0127.003] StrStrW (lpFirst="sleep away.mp3", lpSrch="ntuser.dat.log") returned 0x0
	[0127.004] StrStrW (lpFirst="sleep away.mp3", lpSrch="thumbs.db") returned 0x0
	[0127.004] StrStrW (lpFirst="sleep away.mp3", lpSrch="swapfile.sys") returned 0x0
	[0127.004] CreateFileW (lpFileName="C:\\\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0127.004] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=4842585) returned 1
	[0127.004] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0127.004] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0127.020] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0127.020] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d7f0
	[0127.020] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0127.021] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0127.021] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0127.021] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 0x0
	[0127.040] GetLastError () returned 0x3e5
	[0127.040] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0127.040] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="sleep away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 0
	[0127.041] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0127.041] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520248
	[0127.041] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e78
	[0127.041] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0127.062] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e78 | out: hHeap=0x5f0000) returned 1
	[0127.062] CreateFileW (lpFileName="C:\\\\Users\\Public\\Music\\Sample Music\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\music\\sample music\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0127.063] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0127.064] CloseHandle (hObject=0x3bc) returned 1
	[0127.064] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0127.064] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520248 | out: hHeap=0x5f0000) returned 1
	[0127.064] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0127.064] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0127.064] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sample music", cAlternateFileName="SAMPLE~1")) returned 0
	[0127.065] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0127.225] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520248
	[0127.225] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520280
	[0127.225] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0127.225] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520280 | out: hHeap=0x5f0000) returned 1
	[0127.225] CreateFileW (lpFileName="C:\\\\Users\\Public\\Music\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\music\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0127.226] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0127.227] CloseHandle (hObject=0x3d8) returned 1
	[0127.228] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0127.228] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520248 | out: hHeap=0x5f0000) returned 1
	[0127.228] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520210 | out: hHeap=0x5f0000) returned 1
	[0127.228] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0127.228] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0127.228] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0127.228] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0127.228] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0127.228] lstrcmpW (lpString1="..", lpString2="Pictures") returned -1
	[0127.228] lstrcmpW (lpString1=".", lpString2="Pictures") returned -1
	[0127.228] StrStrW (lpFirst="pictures", lpSrch="programdata") returned 0x0
	[0127.228] StrStrW (lpFirst="pictures", lpSrch="$recycle.bin") returned 0x0
	[0127.228] StrStrW (lpFirst="pictures", lpSrch="program files") returned 0x0
	[0127.228] StrStrW (lpFirst="pictures", lpSrch="windows") returned 0x0
	[0127.228] StrStrW (lpFirst="pictures", lpSrch="all users") returned 0x0
	[0127.228] StrStrW (lpFirst="pictures", lpSrch="winnt") returned 0x0
	[0127.228] StrStrW (lpFirst="pictures", lpSrch="appdata") returned 0x0
	[0127.229] StrStrW (lpFirst="pictures", lpSrch="application data") returned 0x0
	[0127.229] StrStrW (lpFirst="pictures", lpSrch="local settings") returned 0x0
	[0127.229] StrStrW (lpFirst="pictures", lpSrch="boot") returned 0x0
	[0127.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0127.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0127.229] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Pictures\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0127.229] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0127.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0127.229] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0127.229] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0127.229] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0127.229] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0127.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0127.229] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0127.229] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0127.229] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0127.229] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0127.230] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6353c8
	[0127.230] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0127.230] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0127.230] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0127.230] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0127.230] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0127.230] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0127.230] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0127.230] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0127.230] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1
	[0127.230] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0127.230] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0127.230] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0127.230] lstrcmpW (lpString1="..", lpString2="Sample Pictures") returned -1
	[0127.230] lstrcmpW (lpString1=".", lpString2="Sample Pictures") returned -1
	[0127.230] StrStrW (lpFirst="sample pictures", lpSrch="programdata") returned 0x0
	[0127.230] StrStrW (lpFirst="sample pictures", lpSrch="$recycle.bin") returned 0x0
	[0127.230] StrStrW (lpFirst="sample pictures", lpSrch="program files") returned 0x0
	[0127.231] StrStrW (lpFirst="sample pictures", lpSrch="windows") returned 0x0
	[0127.231] StrStrW (lpFirst="sample pictures", lpSrch="all users") returned 0x0
	[0127.231] StrStrW (lpFirst="sample pictures", lpSrch="winnt") returned 0x0
	[0127.231] StrStrW (lpFirst="sample pictures", lpSrch="appdata") returned 0x0
	[0127.231] StrStrW (lpFirst="sample pictures", lpSrch="application data") returned 0x0
	[0127.231] StrStrW (lpFirst="sample pictures", lpSrch="local settings") returned 0x0
	[0127.231] StrStrW (lpFirst="sample pictures", lpSrch="boot") returned 0x0
	[0127.231] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0127.231] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0127.231] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0127.898] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0127.898] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0127.898] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0127.898] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0127.898] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0127.898] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0127.899] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0127.899] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0127.899] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0127.899] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1
	[0127.899] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0127.899] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0127.899] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="ntldr") returned 0x0
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="pagefile.sys") returned 0x0
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="ntdetect.com") returned 0x0
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="autoexec.bat") returned 0x0
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="desktop.ini") returned 0x0
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="autorun.inf") returned 0x0
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="ntuser.dat") returned 0x0
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="iconcache.db") returned 0x0
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="bootsect.bak") returned 0x0
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="boot.ini") returned 0x0
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="bootfont.bin") returned 0x0
	[0127.899] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="config.sys") returned 0x0
	[0127.900] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="io.sys") returned 0x0
	[0127.900] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="msdos.sys") returned 0x0
	[0127.900] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0127.900] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="thumbs.db") returned 0x0
	[0127.900] StrStrW (lpFirst="chrysanthemum.jpg", lpSrch="swapfile.sys") returned 0x0
	[0127.900] CreateFileW (lpFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x378
	[0128.420] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=879394) returned 1
	[0128.421] CreateIoCompletionPort (FileHandle=0x378, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0128.421] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0128.434] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633220
	[0128.434] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0128.434] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0128.435] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0128.435] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0128.435] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0128.438] GetLastError () returned 0x3e5
	[0128.438] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0128.438] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1
	[0128.438] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0128.438] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0128.438] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0128.438] StrStrW (lpFirst="desert.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0128.438] StrStrW (lpFirst="desert.jpg", lpSrch="ntldr") returned 0x0
	[0128.438] StrStrW (lpFirst="desert.jpg", lpSrch="pagefile.sys") returned 0x0
	[0128.438] StrStrW (lpFirst="desert.jpg", lpSrch="ntdetect.com") returned 0x0
	[0128.438] StrStrW (lpFirst="desert.jpg", lpSrch="autoexec.bat") returned 0x0
	[0128.438] StrStrW (lpFirst="desert.jpg", lpSrch="desktop.ini") returned 0x0
	[0128.438] StrStrW (lpFirst="desert.jpg", lpSrch="autorun.inf") returned 0x0
	[0128.438] StrStrW (lpFirst="desert.jpg", lpSrch="ntuser.dat") returned 0x0
	[0128.438] StrStrW (lpFirst="desert.jpg", lpSrch="iconcache.db") returned 0x0
	[0128.439] StrStrW (lpFirst="desert.jpg", lpSrch="bootsect.bak") returned 0x0
	[0128.439] StrStrW (lpFirst="desert.jpg", lpSrch="boot.ini") returned 0x0
	[0128.439] StrStrW (lpFirst="desert.jpg", lpSrch="bootfont.bin") returned 0x0
	[0128.439] StrStrW (lpFirst="desert.jpg", lpSrch="config.sys") returned 0x0
	[0128.439] StrStrW (lpFirst="desert.jpg", lpSrch="io.sys") returned 0x0
	[0128.439] StrStrW (lpFirst="desert.jpg", lpSrch="msdos.sys") returned 0x0
	[0128.439] StrStrW (lpFirst="desert.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0128.439] StrStrW (lpFirst="desert.jpg", lpSrch="thumbs.db") returned 0x0
	[0128.439] StrStrW (lpFirst="desert.jpg", lpSrch="swapfile.sys") returned 0x0
	[0128.439] CreateFileW (lpFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0128.440] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=845941) returned 1
	[0128.440] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0128.440] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0128.453] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0128.453] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d7f0
	[0128.453] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633110) returned 1
	[0128.454] CryptGenRandom (in: hProv=0x633110, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0128.454] CryptReleaseContext (hProv=0x633110, dwFlags=0x0) returned 1
	[0128.454] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0128.762] GetLastError () returned 0x3e5
	[0128.762] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0128.762] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0128.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0128.762] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0128.762] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0128.762] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0128.763] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0128.763] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0128.763] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0128.763] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0128.763] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0128.763] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0128.763] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1
	[0128.763] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0128.763] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0128.763] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0128.763] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0128.763] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="ntldr") returned 0x0
	[0128.763] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="pagefile.sys") returned 0x0
	[0128.763] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="ntdetect.com") returned 0x0
	[0128.763] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="autoexec.bat") returned 0x0
	[0128.763] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="desktop.ini") returned 0x0
	[0128.764] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="autorun.inf") returned 0x0
	[0128.764] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="ntuser.dat") returned 0x0
	[0128.764] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="iconcache.db") returned 0x0
	[0128.764] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="bootsect.bak") returned 0x0
	[0128.764] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="boot.ini") returned 0x0
	[0128.764] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="bootfont.bin") returned 0x0
	[0128.764] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="config.sys") returned 0x0
	[0128.764] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="io.sys") returned 0x0
	[0128.764] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="msdos.sys") returned 0x0
	[0128.764] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0128.764] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="thumbs.db") returned 0x0
	[0128.764] StrStrW (lpFirst="hydrangeas.jpg", lpSrch="swapfile.sys") returned 0x0
	[0128.764] CreateFileW (lpFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3ec
	[0128.783] GetFileSizeEx (in: hFile=0x3ec, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=595284) returned 1
	[0128.783] CreateIoCompletionPort (FileHandle=0x3ec, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0128.783] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4ab0020
	[0128.796] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633110
	[0128.796] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x671788
	[0128.796] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633198) returned 1
	[0128.797] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0128.797] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0128.797] ReadFile (in: hFile=0x3ec, lpBuffer=0x4ab0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020 | out: lpBuffer=0x4ab0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4ab0020) returned 1
	[0128.810] GetLastError () returned 0x3e5
	[0128.810] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0128.810] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1
	[0128.810] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0128.810] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0128.810] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0128.810] StrStrW (lpFirst="jellyfish.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0128.810] StrStrW (lpFirst="jellyfish.jpg", lpSrch="ntldr") returned 0x0
	[0128.810] StrStrW (lpFirst="jellyfish.jpg", lpSrch="pagefile.sys") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="ntdetect.com") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="autoexec.bat") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="desktop.ini") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="autorun.inf") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="ntuser.dat") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="iconcache.db") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="bootsect.bak") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="boot.ini") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="bootfont.bin") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="config.sys") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="io.sys") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="msdos.sys") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="thumbs.db") returned 0x0
	[0128.811] StrStrW (lpFirst="jellyfish.jpg", lpSrch="swapfile.sys") returned 0x0
	[0128.812] CreateFileW (lpFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0128.841] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=775702) returned 1
	[0128.841] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0128.841] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0128.856] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0128.856] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0128.856] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633198) returned 1
	[0128.857] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0128.857] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0128.857] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0128.919] GetLastError () returned 0x3e5
	[0128.919] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0128.919] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1
	[0128.919] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0128.919] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0128.919] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0128.919] StrStrW (lpFirst="koala.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0128.919] StrStrW (lpFirst="koala.jpg", lpSrch="ntldr") returned 0x0
	[0128.919] StrStrW (lpFirst="koala.jpg", lpSrch="pagefile.sys") returned 0x0
	[0128.920] StrStrW (lpFirst="koala.jpg", lpSrch="ntdetect.com") returned 0x0
	[0128.920] StrStrW (lpFirst="koala.jpg", lpSrch="autoexec.bat") returned 0x0
	[0128.920] StrStrW (lpFirst="koala.jpg", lpSrch="desktop.ini") returned 0x0
	[0128.920] StrStrW (lpFirst="koala.jpg", lpSrch="autorun.inf") returned 0x0
	[0128.920] StrStrW (lpFirst="koala.jpg", lpSrch="ntuser.dat") returned 0x0
	[0128.920] StrStrW (lpFirst="koala.jpg", lpSrch="iconcache.db") returned 0x0
	[0128.920] StrStrW (lpFirst="koala.jpg", lpSrch="bootsect.bak") returned 0x0
	[0128.920] StrStrW (lpFirst="koala.jpg", lpSrch="boot.ini") returned 0x0
	[0128.920] StrStrW (lpFirst="koala.jpg", lpSrch="bootfont.bin") returned 0x0
	[0128.920] StrStrW (lpFirst="koala.jpg", lpSrch="config.sys") returned 0x0
	[0128.920] StrStrW (lpFirst="koala.jpg", lpSrch="io.sys") returned 0x0
	[0128.921] StrStrW (lpFirst="koala.jpg", lpSrch="msdos.sys") returned 0x0
	[0128.921] StrStrW (lpFirst="koala.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0128.921] StrStrW (lpFirst="koala.jpg", lpSrch="thumbs.db") returned 0x0
	[0128.921] StrStrW (lpFirst="koala.jpg", lpSrch="swapfile.sys") returned 0x0
	[0128.921] CreateFileW (lpFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x378
	[0128.921] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=780831) returned 1
	[0128.922] CreateIoCompletionPort (FileHandle=0x378, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0128.922] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4750020
	[0128.940] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526388
	[0128.940] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0128.940] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633198) returned 1
	[0128.941] CryptGenRandom (in: hProv=0x633198, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0128.954] CryptReleaseContext (hProv=0x633198, dwFlags=0x0) returned 1
	[0128.954] ReadFile (in: hFile=0x378, lpBuffer=0x4750054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020 | out: lpBuffer=0x4750054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4750020) returned 1
	[0128.969] GetLastError () returned 0x3e5
	[0128.969] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0128.969] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1
	[0128.969] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0128.969] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0128.969] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0128.969] StrStrW (lpFirst="lighthouse.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0128.969] StrStrW (lpFirst="lighthouse.jpg", lpSrch="ntldr") returned 0x0
	[0128.969] StrStrW (lpFirst="lighthouse.jpg", lpSrch="pagefile.sys") returned 0x0
	[0128.969] StrStrW (lpFirst="lighthouse.jpg", lpSrch="ntdetect.com") returned 0x0
	[0128.969] StrStrW (lpFirst="lighthouse.jpg", lpSrch="autoexec.bat") returned 0x0
	[0128.969] StrStrW (lpFirst="lighthouse.jpg", lpSrch="desktop.ini") returned 0x0
	[0128.969] StrStrW (lpFirst="lighthouse.jpg", lpSrch="autorun.inf") returned 0x0
	[0128.970] StrStrW (lpFirst="lighthouse.jpg", lpSrch="ntuser.dat") returned 0x0
	[0128.970] StrStrW (lpFirst="lighthouse.jpg", lpSrch="iconcache.db") returned 0x0
	[0128.970] StrStrW (lpFirst="lighthouse.jpg", lpSrch="bootsect.bak") returned 0x0
	[0128.970] StrStrW (lpFirst="lighthouse.jpg", lpSrch="boot.ini") returned 0x0
	[0128.970] StrStrW (lpFirst="lighthouse.jpg", lpSrch="bootfont.bin") returned 0x0
	[0128.970] StrStrW (lpFirst="lighthouse.jpg", lpSrch="config.sys") returned 0x0
	[0128.970] StrStrW (lpFirst="lighthouse.jpg", lpSrch="io.sys") returned 0x0
	[0128.970] StrStrW (lpFirst="lighthouse.jpg", lpSrch="msdos.sys") returned 0x0
	[0128.970] StrStrW (lpFirst="lighthouse.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0128.970] StrStrW (lpFirst="lighthouse.jpg", lpSrch="thumbs.db") returned 0x0
	[0128.970] StrStrW (lpFirst="lighthouse.jpg", lpSrch="swapfile.sys") returned 0x0
	[0128.971] CreateFileW (lpFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x37c
	[0129.002] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=561276) returned 1
	[0129.002] CreateIoCompletionPort (FileHandle=0x37c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0129.002] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4bb0020
	[0129.017] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x80) returned 0x633198
	[0129.017] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x671c98
	[0129.017] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0129.018] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0129.018] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0129.018] ReadFile (in: hFile=0x37c, lpBuffer=0x4bb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020 | out: lpBuffer=0x4bb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4bb0020) returned 1
	[0129.280] GetLastError () returned 0x3e5
	[0129.280] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0129.280] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1
	[0129.280] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0129.280] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0129.280] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0129.280] StrStrW (lpFirst="penguins.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0129.280] StrStrW (lpFirst="penguins.jpg", lpSrch="ntldr") returned 0x0
	[0129.280] StrStrW (lpFirst="penguins.jpg", lpSrch="pagefile.sys") returned 0x0
	[0129.280] StrStrW (lpFirst="penguins.jpg", lpSrch="ntdetect.com") returned 0x0
	[0129.280] StrStrW (lpFirst="penguins.jpg", lpSrch="autoexec.bat") returned 0x0
	[0129.280] StrStrW (lpFirst="penguins.jpg", lpSrch="desktop.ini") returned 0x0
	[0129.280] StrStrW (lpFirst="penguins.jpg", lpSrch="autorun.inf") returned 0x0
	[0129.280] StrStrW (lpFirst="penguins.jpg", lpSrch="ntuser.dat") returned 0x0
	[0129.280] StrStrW (lpFirst="penguins.jpg", lpSrch="iconcache.db") returned 0x0
	[0129.281] StrStrW (lpFirst="penguins.jpg", lpSrch="bootsect.bak") returned 0x0
	[0129.281] StrStrW (lpFirst="penguins.jpg", lpSrch="boot.ini") returned 0x0
	[0129.281] StrStrW (lpFirst="penguins.jpg", lpSrch="bootfont.bin") returned 0x0
	[0129.281] StrStrW (lpFirst="penguins.jpg", lpSrch="config.sys") returned 0x0
	[0129.281] StrStrW (lpFirst="penguins.jpg", lpSrch="io.sys") returned 0x0
	[0129.281] StrStrW (lpFirst="penguins.jpg", lpSrch="msdos.sys") returned 0x0
	[0129.281] StrStrW (lpFirst="penguins.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0129.281] StrStrW (lpFirst="penguins.jpg", lpSrch="thumbs.db") returned 0x0
	[0129.281] StrStrW (lpFirst="penguins.jpg", lpSrch="swapfile.sys") returned 0x0
	[0129.281] CreateFileW (lpFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3dc
	[0129.282] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=777835) returned 1
	[0129.282] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0129.282] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4650020
	[0129.296] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526478
	[0129.296] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351cdd0
	[0129.296] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0129.297] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0129.297] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0129.298] ReadFile (in: hFile=0x3dc, lpBuffer=0x4650054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020 | out: lpBuffer=0x4650054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4650020) returned 1
	[0129.325] GetLastError () returned 0x3e5
	[0129.325] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0129.325] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1
	[0129.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0129.325] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0129.325] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0129.325] StrStrW (lpFirst="tulips.jpg", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0129.325] StrStrW (lpFirst="tulips.jpg", lpSrch="ntldr") returned 0x0
	[0129.325] StrStrW (lpFirst="tulips.jpg", lpSrch="pagefile.sys") returned 0x0
	[0129.325] StrStrW (lpFirst="tulips.jpg", lpSrch="ntdetect.com") returned 0x0
	[0129.325] StrStrW (lpFirst="tulips.jpg", lpSrch="autoexec.bat") returned 0x0
	[0129.325] StrStrW (lpFirst="tulips.jpg", lpSrch="desktop.ini") returned 0x0
	[0129.326] StrStrW (lpFirst="tulips.jpg", lpSrch="autorun.inf") returned 0x0
	[0129.326] StrStrW (lpFirst="tulips.jpg", lpSrch="ntuser.dat") returned 0x0
	[0129.326] StrStrW (lpFirst="tulips.jpg", lpSrch="iconcache.db") returned 0x0
	[0129.326] StrStrW (lpFirst="tulips.jpg", lpSrch="bootsect.bak") returned 0x0
	[0129.326] StrStrW (lpFirst="tulips.jpg", lpSrch="boot.ini") returned 0x0
	[0129.326] StrStrW (lpFirst="tulips.jpg", lpSrch="bootfont.bin") returned 0x0
	[0129.326] StrStrW (lpFirst="tulips.jpg", lpSrch="config.sys") returned 0x0
	[0129.326] StrStrW (lpFirst="tulips.jpg", lpSrch="io.sys") returned 0x0
	[0129.326] StrStrW (lpFirst="tulips.jpg", lpSrch="msdos.sys") returned 0x0
	[0129.326] StrStrW (lpFirst="tulips.jpg", lpSrch="ntuser.dat.log") returned 0x0
	[0129.326] StrStrW (lpFirst="tulips.jpg", lpSrch="thumbs.db") returned 0x0
	[0129.326] StrStrW (lpFirst="tulips.jpg", lpSrch="swapfile.sys") returned 0x0
	[0129.326] CreateFileW (lpFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3e0
	[0129.327] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=620888) returned 1
	[0129.327] CreateIoCompletionPort (FileHandle=0x3e0, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0129.327] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x49b0020
	[0129.341] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x35264f0
	[0129.341] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d7f0
	[0129.341] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0129.342] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0129.342] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0129.342] ReadFile (in: hFile=0x3e0, lpBuffer=0x49b0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020 | out: lpBuffer=0x49b0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x49b0020) returned 1
	[0129.370] GetLastError () returned 0x3e5
	[0129.370] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0129.370] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="tulips.jpg", cAlternateFileName="")) returned 0
	[0129.370] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0129.370] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0129.370] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0129.370] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0129.370] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0129.371] CreateFileW (lpFileName="C:\\\\Users\\Public\\Pictures\\Sample Pictures\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0129.371] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0129.372] CloseHandle (hObject=0x3bc) returned 1
	[0129.372] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0129.372] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0129.372] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0129.372] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0129.372] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sample pictures", cAlternateFileName="SAMPLE~1")) returned 0
	[0129.372] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0129.372] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0129.372] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0129.373] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0129.373] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0129.373] CreateFileW (lpFileName="C:\\\\Users\\Public\\Pictures\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\pictures\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0129.373] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0129.374] CloseHandle (hObject=0x3d8) returned 1
	[0129.374] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0129.374] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0129.374] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0129.374] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0129.374] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1
	[0129.374] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0129.374] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x46) returned 0x628ad8
	[0129.374] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0129.374] lstrcmpW (lpString1="..", lpString2="Recorded TV") returned -1
	[0129.374] lstrcmpW (lpString1=".", lpString2="Recorded TV") returned -1
	[0129.375] StrStrW (lpFirst="recorded tv", lpSrch="programdata") returned 0x0
	[0129.375] StrStrW (lpFirst="recorded tv", lpSrch="$recycle.bin") returned 0x0
	[0129.375] StrStrW (lpFirst="recorded tv", lpSrch="program files") returned 0x0
	[0129.375] StrStrW (lpFirst="recorded tv", lpSrch="windows") returned 0x0
	[0129.375] StrStrW (lpFirst="recorded tv", lpSrch="all users") returned 0x0
	[0129.375] StrStrW (lpFirst="recorded tv", lpSrch="winnt") returned 0x0
	[0129.375] StrStrW (lpFirst="recorded tv", lpSrch="appdata") returned 0x0
	[0129.375] StrStrW (lpFirst="recorded tv", lpSrch="application data") returned 0x0
	[0129.375] StrStrW (lpFirst="recorded tv", lpSrch="local settings") returned 0x0
	[0129.375] StrStrW (lpFirst="recorded tv", lpSrch="boot") returned 0x0
	[0129.375] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0129.375] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0129.375] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0129.375] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0129.376] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0129.376] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0129.376] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0129.376] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0129.376] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.376] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0129.376] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0129.376] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0129.376] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0129.376] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0129.376] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0129.376] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0129.376] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0129.376] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0129.376] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0129.376] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0129.376] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0129.376] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0129.376] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0129.376] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1
	[0129.376] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0129.376] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0129.376] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0129.376] lstrcmpW (lpString1="..", lpString2="Sample Media") returned -1
	[0129.377] lstrcmpW (lpString1=".", lpString2="Sample Media") returned -1
	[0129.377] StrStrW (lpFirst="sample media", lpSrch="programdata") returned 0x0
	[0129.377] StrStrW (lpFirst="sample media", lpSrch="$recycle.bin") returned 0x0
	[0129.377] StrStrW (lpFirst="sample media", lpSrch="program files") returned 0x0
	[0129.377] StrStrW (lpFirst="sample media", lpSrch="windows") returned 0x0
	[0129.377] StrStrW (lpFirst="sample media", lpSrch="all users") returned 0x0
	[0129.377] StrStrW (lpFirst="sample media", lpSrch="winnt") returned 0x0
	[0129.377] StrStrW (lpFirst="sample media", lpSrch="appdata") returned 0x0
	[0129.377] StrStrW (lpFirst="sample media", lpSrch="application data") returned 0x0
	[0129.377] StrStrW (lpFirst="sample media", lpSrch="local settings") returned 0x0
	[0129.377] StrStrW (lpFirst="sample media", lpSrch="boot") returned 0x0
	[0129.377] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635360
	[0129.377] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0129.377] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0129.377] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0129.377] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0129.378] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0129.378] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0129.378] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0129.378] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.378] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0129.378] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0129.378] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0129.378] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0129.378] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0129.378] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0129.378] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0129.378] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0129.378] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0129.378] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0129.378] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0129.378] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0129.378] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0129.378] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0129.378] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1
	[0129.378] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0129.378] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639e98
	[0129.379] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="ntldr") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="pagefile.sys") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="ntdetect.com") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="autoexec.bat") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="desktop.ini") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="autorun.inf") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="ntuser.dat") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="iconcache.db") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="bootsect.bak") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="boot.ini") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="bootfont.bin") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="config.sys") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="io.sys") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="msdos.sys") returned 0x0
	[0129.379] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="ntuser.dat.log") returned 0x0
	[0129.380] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="thumbs.db") returned 0x0
	[0129.380] StrStrW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="swapfile.sys") returned 0x0
	[0129.380] CreateFileW (lpFileName="C:\\\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x3b8
	[0129.380] GetFileSizeEx (in: hFile=0x3b8, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=9699328) returned 1
	[0129.380] CreateIoCompletionPort (FileHandle=0x3b8, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0129.380] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4cb0020
	[0129.392] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x90) returned 0x639c38
	[0129.392] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x6721a8
	[0129.392] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0129.393] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0129.393] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0129.393] ReadFile (in: hFile=0x3b8, lpBuffer=0x4cb0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020 | out: lpBuffer=0x4cb0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4cb0020) returned 1
	[0129.396] GetLastError () returned 0x3e5
	[0129.396] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0129.396] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0
	[0129.396] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0129.397] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0129.397] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x635430
	[0129.397] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x8e) returned 0x639e98
	[0129.397] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635430 | out: hHeap=0x5f0000) returned 1
	[0129.397] CreateFileW (lpFileName="C:\\\\Users\\Public\\Recorded TV\\Sample Media\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0129.414] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0129.415] CloseHandle (hObject=0x3bc) returned 1
	[0129.415] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x639e98 | out: hHeap=0x5f0000) returned 1
	[0129.415] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0129.415] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x635360 | out: hHeap=0x5f0000) returned 1
	[0129.415] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0129.415] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sample media", cAlternateFileName="SAMPLE~1")) returned 0
	[0129.415] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0129.415] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0129.415] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x665770
	[0129.415] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0129.415] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x665770 | out: hHeap=0x5f0000) returned 1
	[0129.415] CreateFileW (lpFileName="C:\\\\Users\\Public\\Recorded TV\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\recorded tv\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0129.416] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0129.417] CloseHandle (hObject=0x3d8) returned 1
	[0129.417] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0129.417] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0129.417] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0129.417] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x628ad8 | out: hHeap=0x5f0000) returned 1
	[0129.417] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0129.417] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0129.417] lstrcmpW (lpString1="..", lpString2="Videos") returned -1
	[0129.417] lstrcmpW (lpString1=".", lpString2="Videos") returned -1
	[0129.417] StrStrW (lpFirst="videos", lpSrch="programdata") returned 0x0
	[0129.417] StrStrW (lpFirst="videos", lpSrch="$recycle.bin") returned 0x0
	[0129.417] StrStrW (lpFirst="videos", lpSrch="program files") returned 0x0
	[0129.417] StrStrW (lpFirst="videos", lpSrch="windows") returned 0x0
	[0129.417] StrStrW (lpFirst="videos", lpSrch="all users") returned 0x0
	[0129.417] StrStrW (lpFirst="videos", lpSrch="winnt") returned 0x0
	[0129.417] StrStrW (lpFirst="videos", lpSrch="appdata") returned 0x0
	[0129.417] StrStrW (lpFirst="videos", lpSrch="application data") returned 0x0
	[0129.417] StrStrW (lpFirst="videos", lpSrch="local settings") returned 0x0
	[0129.417] StrStrW (lpFirst="videos", lpSrch="boot") returned 0x0
	[0129.417] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520210
	[0129.417] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0129.417] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Videos\\*", lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61e9d0
	[0129.418] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0129.418] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0129.418] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0129.418] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0129.418] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0129.418] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.418] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0129.418] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0129.418] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0129.418] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0129.418] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0129.418] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6353c8
	[0129.418] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0129.418] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0129.418] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0129.418] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0129.418] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0129.418] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0129.418] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0129.418] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0129.418] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1
	[0129.418] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0129.418] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x5e) returned 0x6353c8
	[0129.419] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0129.419] lstrcmpW (lpString1="..", lpString2="Sample Videos") returned -1
	[0129.419] lstrcmpW (lpString1=".", lpString2="Sample Videos") returned -1
	[0129.419] StrStrW (lpFirst="sample videos", lpSrch="programdata") returned 0x0
	[0129.419] StrStrW (lpFirst="sample videos", lpSrch="$recycle.bin") returned 0x0
	[0129.419] StrStrW (lpFirst="sample videos", lpSrch="program files") returned 0x0
	[0129.419] StrStrW (lpFirst="sample videos", lpSrch="windows") returned 0x0
	[0129.419] StrStrW (lpFirst="sample videos", lpSrch="all users") returned 0x0
	[0129.419] StrStrW (lpFirst="sample videos", lpSrch="winnt") returned 0x0
	[0129.419] StrStrW (lpFirst="sample videos", lpSrch="appdata") returned 0x0
	[0129.419] StrStrW (lpFirst="sample videos", lpSrch="application data") returned 0x0
	[0129.419] StrStrW (lpFirst="sample videos", lpSrch="local settings") returned 0x0
	[0129.419] StrStrW (lpFirst="sample videos", lpSrch="boot") returned 0x0
	[0129.419] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0129.419] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0129.419] FindFirstFileW (in: lpFileName="C:\\\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x61ea90
	[0129.419] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0129.419] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0129.419] lstrcmpW (lpString1="..", lpString2=".") returned 1
	[0129.419] lstrcmpW (lpString1=".", lpString2=".") returned 0
	[0129.420] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0129.420] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.420] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0129.420] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0129.420] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0129.420] lstrcmpW (lpString1="..", lpString2="..") returned 0
	[0129.420] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0129.420] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0129.420] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0129.420] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0129.420] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0129.420] StrStrW (lpFirst="desktop.ini", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0129.420] StrStrW (lpFirst="desktop.ini", lpSrch="ntldr") returned 0x0
	[0129.420] StrStrW (lpFirst="desktop.ini", lpSrch="pagefile.sys") returned 0x0
	[0129.420] StrStrW (lpFirst="desktop.ini", lpSrch="ntdetect.com") returned 0x0
	[0129.420] StrStrW (lpFirst="desktop.ini", lpSrch="autoexec.bat") returned 0x0
	[0129.420] StrStrW (lpFirst="desktop.ini", lpSrch="desktop.ini") returned="desktop.ini"
	[0129.420] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0129.420] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1
	[0129.420] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0129.420] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0129.420] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0129.420] StrStrW (lpFirst="wildlife.wmv", lpSrch="read_me_lkdtt.txt") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="ntldr") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="pagefile.sys") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="ntdetect.com") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="autoexec.bat") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="desktop.ini") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="autorun.inf") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="ntuser.dat") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="iconcache.db") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="bootsect.bak") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="boot.ini") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="bootfont.bin") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="config.sys") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="io.sys") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="msdos.sys") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="ntuser.dat.log") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="thumbs.db") returned 0x0
	[0129.421] StrStrW (lpFirst="wildlife.wmv", lpSrch="swapfile.sys") returned 0x0
	[0129.421] CreateFileW (lpFileName="C:\\\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000080, hTemplateFile=0x0) returned 0x38c
	[0129.422] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x3f6e788 | out: lpFileSize=0x3f6e788*=26246026) returned 1
	[0129.422] CreateIoCompletionPort (FileHandle=0x38c, ExistingCompletionPort=0xc8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0xc8
	[0129.422] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0xf0090) returned 0x4db0020
	[0129.452] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x70) returned 0x3526568
	[0129.452] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x508) returned 0x351d2e0
	[0129.452] CryptAcquireContextW (in: phProv=0x3f6e45c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x3f6e45c*=0x633220) returned 1
	[0129.453] CryptGenRandom (in: hProv=0x633220, dwLen=0x80, pbBuffer=0x3f6e470 | out: pbBuffer=0x3f6e470) returned 1
	[0129.453] CryptReleaseContext (hProv=0x633220, dwFlags=0x0) returned 1
	[0129.453] ReadFile (in: hFile=0x38c, lpBuffer=0x4db0054, nNumberOfBytesToRead=0x78000, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020 | out: lpBuffer=0x4db0054*, lpNumberOfBytesRead=0x0, lpOverlapped=0x4db0020) returned 1
	[0129.484] GetLastError () returned 0x3e5
	[0129.484] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0129.484] FindNextFileW (in: hFindFile=0x61ea90, lpFindFileData=0x3f6e860 | out: lpFindFileData=0x3f6e860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="wildlife.wmv", cAlternateFileName="")) returned 0
	[0129.484] FindClose (in: hFindFile=0x61ea90 | out: hFindFile=0x61ea90) returned 1
	[0129.484] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520248
	[0129.484] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644e20
	[0129.484] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x76) returned 0x6470c0
	[0129.485] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644e20 | out: hHeap=0x5f0000) returned 1
	[0129.485] CreateFileW (lpFileName="C:\\\\Users\\Public\\Videos\\Sample Videos\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3bc
	[0129.485] WriteFile (in: hFile=0x3bc, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6e844, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6e844*=0x512, lpOverlapped=0x0) returned 1
	[0129.486] CloseHandle (hObject=0x3bc) returned 1
	[0129.486] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6470c0 | out: hHeap=0x5f0000) returned 1
	[0129.486] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520248 | out: hHeap=0x5f0000) returned 1
	[0129.486] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0129.487] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0129.487] FindNextFileW (in: hFindFile=0x61e9d0, lpFindFileData=0x3f6eb90 | out: lpFindFileData=0x3f6eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sample videos", cAlternateFileName="SAMPLE~1")) returned 0
	[0129.487] FindClose (in: hFindFile=0x61e9d0 | out: hFindFile=0x61e9d0) returned 1
	[0129.487] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520248
	[0129.487] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0129.487] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x60) returned 0x6353c8
	[0129.487] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0129.487] CreateFileW (lpFileName="C:\\\\Users\\Public\\Videos\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\videos\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d8
	[0129.488] WriteFile (in: hFile=0x3d8, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eb74, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eb74*=0x512, lpOverlapped=0x0) returned 1
	[0129.489] CloseHandle (hObject=0x3d8) returned 1
	[0129.489] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6353c8 | out: hHeap=0x5f0000) returned 1
	[0129.489] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520248 | out: hHeap=0x5f0000) returned 1
	[0129.489] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520210 | out: hHeap=0x5f0000) returned 1
	[0129.489] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0129.489] FindNextFileW (in: hFindFile=0x61e910, lpFindFileData=0x3f6eec0 | out: lpFindFileData=0x3f6eec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="videos", cAlternateFileName="")) returned 0
	[0129.489] FindClose (in: hFindFile=0x61e910 | out: hFindFile=0x61e910) returned 1
	[0129.489] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201d8
	[0129.489] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x3520210
	[0129.489] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x50) returned 0x644bb8
	[0129.489] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3520210 | out: hHeap=0x5f0000) returned 1
	[0129.489] CreateFileW (lpFileName="C:\\\\Users\\Public\\read_me_lkdtt.txt" (normalized: "c:\\users\\public\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3a4
	[0129.516] WriteFile (in: hFile=0x3a4, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6eea4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6eea4*=0x512, lpOverlapped=0x0) returned 1
	[0129.517] CloseHandle (hObject=0x3a4) returned 1
	[0129.517] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x644bb8 | out: hHeap=0x5f0000) returned 1
	[0129.517] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201d8 | out: hHeap=0x5f0000) returned 1
	[0129.517] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35200f8 | out: hHeap=0x5f0000) returned 1
	[0129.517] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0129.517] FindNextFileW (in: hFindFile=0x61e890, lpFindFileData=0x3f6f1f0 | out: lpFindFileData=0x3f6f1f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x16000016, cFileName="public", cAlternateFileName="")) returned 0
	[0129.517] FindClose (in: hFindFile=0x61e890 | out: hFindFile=0x61e890) returned 1
	[0129.517] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0129.517] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x3526fe8
	[0129.517] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x40) returned 0x6657b8
	[0129.517] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526fe8 | out: hHeap=0x5f0000) returned 1
	[0129.517] CreateFileW (lpFileName="C:\\\\Users\\read_me_lkdtt.txt" (normalized: "c:\\users\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x39c
	[0129.518] WriteFile (in: hFile=0x39c, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6f1d4, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6f1d4*=0x512, lpOverlapped=0x0) returned 1
	[0129.519] CloseHandle (hObject=0x39c) returned 1
	[0129.519] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x6657b8 | out: hHeap=0x5f0000) returned 1
	[0129.519] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0129.519] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x3526f98 | out: hHeap=0x5f0000) returned 1
	[0129.519] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35270d8 | out: hHeap=0x5f0000) returned 1
	[0129.519] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0129.520] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20) returned 0x35270d8
	[0129.520] lstrcmpW (lpString1="..", lpString2="Windows") returned -1
	[0129.520] lstrcmpW (lpString1=".", lpString2="Windows") returned -1
	[0129.520] StrStrW (lpFirst="windows", lpSrch="programdata") returned 0x0
	[0129.520] StrStrW (lpFirst="windows", lpSrch="$recycle.bin") returned 0x0
	[0129.520] StrStrW (lpFirst="windows", lpSrch="program files") returned 0x0
	[0129.520] StrStrW (lpFirst="windows", lpSrch="windows") returned="windows"
	[0129.520] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35270d8 | out: hHeap=0x5f0000) returned 1
	[0129.520] FindNextFileW (in: hFindFile=0x61e810, lpFindFileData=0x3f6f520 | out: lpFindFileData=0x3f6f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="windows", cAlternateFileName="")) returned 0
	[0129.520] FindClose (in: hFindFile=0x61e810 | out: hFindFile=0x61e810) returned 1
	[0129.520] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x30) returned 0x35201a0
	[0129.520] CreateFileW (lpFileName="C:\\\\read_me_lkdtt.txt" (normalized: "c:\\read_me_lkdtt.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x298
	[0129.520] WriteFile (in: hFile=0x298, lpBuffer=0x6109f8*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x3f6f504, lpOverlapped=0x0 | out: lpBuffer=0x6109f8*, lpNumberOfBytesWritten=0x3f6f504*=0x512, lpOverlapped=0x0) returned 1
	[0129.521] CloseHandle (hObject=0x298) returned 1
	[0129.521] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x35201a0 | out: hHeap=0x5f0000) returned 1
	[0129.521] GetCurrentThreadId () returned 0x8f8
	[0129.522] GetCurrentThreadId () returned 0x8f8
	[0129.522] GetLastError () returned 0x0
	[0129.522] SetLastError (dwErrCode=0x0) 
	[0129.522] GetLastError () returned 0x0
	[0129.522] SetLastError (dwErrCode=0x0) 
	[0129.522] WriteFile (in: hFile=0x7, lpBuffer=0x3f6dd60*, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0x3f6dd58, lpOverlapped=0x0 | out: lpBuffer=0x3f6dd60*, lpNumberOfBytesWritten=0x3f6dd58*=0x47, lpOverlapped=0x0) returned 1
	[0129.530] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x643660 | out: hHeap=0x5f0000) returned 1
	[0129.530] HeapFree (in: hHeap=0x5f0000, dwFlags=0x0, lpMem=0x66b168 | out: hHeap=0x5f0000) returned 1

Thread:
	id = 114
	os_tid = 0xa84


Thread:
	id = 116
	os_tid = 0x8e8


Process:
	id = "2"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x971d000"
	os_pid = "0x370"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "1"
	os_parent_pid = "0x1d8"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d057" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 15
	os_tid = 0xa78


Thread:
	id = 16
	os_tid = 0xa74


Thread:
	id = 17
	os_tid = 0xab8


Thread:
	id = 18
	os_tid = 0x998


Thread:
	id = 19
	os_tid = 0x968


Thread:
	id = 20
	os_tid = 0x828


Thread:
	id = 21
	os_tid = 0x888


Thread:
	id = 22
	os_tid = 0x838


Thread:
	id = 23
	os_tid = 0x8a8


Thread:
	id = 24
	os_tid = 0x858


Thread:
	id = 25
	os_tid = 0x818


Thread:
	id = 26
	os_tid = 0x790


Thread:
	id = 27
	os_tid = 0x320


Thread:
	id = 28
	os_tid = 0x6cc


Thread:
	id = 29
	os_tid = 0x42c


Thread:
	id = 30
	os_tid = 0x1e4


Thread:
	id = 31
	os_tid = 0x760


Thread:
	id = 32
	os_tid = 0x75c


Thread:
	id = 33
	os_tid = 0x74c


Thread:
	id = 34
	os_tid = 0x710


Thread:
	id = 35
	os_tid = 0x6d0


Thread:
	id = 36
	os_tid = 0x6bc


Thread:
	id = 37
	os_tid = 0x6b8


Thread:
	id = 38
	os_tid = 0x6b0


Thread:
	id = 39
	os_tid = 0x6a8


Thread:
	id = 40
	os_tid = 0x69c


Thread:
	id = 41
	os_tid = 0x698


Thread:
	id = 42
	os_tid = 0x688


Thread:
	id = 43
	os_tid = 0x684


Thread:
	id = 44
	os_tid = 0x678


Thread:
	id = 45
	os_tid = 0x4a8


Thread:
	id = 46
	os_tid = 0x46c


Thread:
	id = 47
	os_tid = 0x44c


Thread:
	id = 48
	os_tid = 0x424


Thread:
	id = 49
	os_tid = 0x420


Thread:
	id = 50
	os_tid = 0x41c


Thread:
	id = 51
	os_tid = 0x404


Thread:
	id = 52
	os_tid = 0x14c


Thread:
	id = 53
	os_tid = 0x158


Thread:
	id = 54
	os_tid = 0x3fc


Thread:
	id = 55
	os_tid = 0x3f4


Thread:
	id = 56
	os_tid = 0x3e8


Thread:
	id = 57
	os_tid = 0x39c


Thread:
	id = 58
	os_tid = 0x390


Thread:
	id = 59
	os_tid = 0x38c


Thread:
	id = 60
	os_tid = 0x388


Thread:
	id = 61
	os_tid = 0x37c


Thread:
	id = 62
	os_tid = 0x374


Process:
	id = "3"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x6576b000"
	os_pid = "0xa2c"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "2"
	os_parent_pid = "0x250"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Network Service"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0004507f" [0xc000000f]


Thread:
	id = 63
	os_tid = 0xa80


Thread:
	id = 64
	os_tid = 0xa54


Thread:
	id = 65
	os_tid = 0xa4c


Thread:
	id = 66
	os_tid = 0xa48


Thread:
	id = 67
	os_tid = 0xa44


Thread:
	id = 68
	os_tid = 0xa40


Thread:
	id = 69
	os_tid = 0xa3c


Thread:
	id = 70
	os_tid = 0xa38


Thread:
	id = 71
	os_tid = 0xa34


Thread:
	id = 72
	os_tid = 0xa30


Process:
	id = "4"
	image_name = "wmiprvse.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe"
	page_root = "0x60f66000"
	os_pid = "0x9fc"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e990"
	monitor_reason = "rpc_server"
	parent_id = "2"
	os_parent_pid = "0x250"
	cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d057" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 73
	os_tid = 0xac8


Thread:
	id = 74
	os_tid = 0xa1c


Thread:
	id = 75
	os_tid = 0xa18


Thread:
	id = 76
	os_tid = 0xa14


Thread:
	id = 77
	os_tid = 0xa10


Thread:
	id = 78
	os_tid = 0xa0c


Thread:
	id = 79
	os_tid = 0xa08


Thread:
	id = 80
	os_tid = 0xa04


Thread:
	id = 81
	os_tid = 0xa00


Process:
	id = "5"
	image_name = "vssvc.exe"
	filename = "c:\\windows\\system32\\vssvc.exe"
	page_root = "0x47732000"
	os_pid = "0x640"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b7e890"
	monitor_reason = "rpc_server"
	parent_id = "3"
	os_parent_pid = "0x1d8"
	cmd_line = "C:\\Windows\\system32\\vssvc.exe"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0005cc51" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 82
	os_tid = 0x440


Thread:
	id = 83
	os_tid = 0x308

	[0070.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xe9d640 | out: lpSystemTimeAsFileTime=0xe9d640*(dwLowDateTime=0x3e903b80, dwHighDateTime=0x1d6bd30)) 
	[0070.688] GetCurrentProcessId () returned 0x640
	[0070.688] GetCurrentThreadId () returned 0x308
	[0070.688] GetTickCount () returned 0x1148b9d
	[0070.688] QueryPerformanceCounter (in: lpPerformanceCount=0xe9d648 | out: lpPerformanceCount=0xe9d648*=19093868456) returned 1
	[0070.688] malloc (_Size=0x100) returned 0x28e80

Thread:
	id = 84
	os_tid = 0x31c


Thread:
	id = 85
	os_tid = 0x54c


Thread:
	id = 86
	os_tid = 0x7f4


Thread:
	id = 87
	os_tid = 0x518


Thread:
	id = 88
	os_tid = 0x240


Thread:
	id = 103
	os_tid = 0x314


Process:
	id = "6"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x972d000"
	os_pid = "0xc8"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "5"
	os_parent_pid = "0x1d8"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Local Service"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dde1" [0xc000000f], "LOCAL" [0x7]


Thread:
	id = 89
	os_tid = 0xbe4


Thread:
	id = 90
	os_tid = 0x768


Thread:
	id = 91
	os_tid = 0x764


Thread:
	id = 92
	os_tid = 0x758


Thread:
	id = 93
	os_tid = 0x724


Thread:
	id = 94
	os_tid = 0x718


Thread:
	id = 95
	os_tid = 0x714


Thread:
	id = 96
	os_tid = 0x630


Thread:
	id = 97
	os_tid = 0x154


Thread:
	id = 98
	os_tid = 0x150


Thread:
	id = 99
	os_tid = 0x120


Thread:
	id = 100
	os_tid = 0x124


Thread:
	id = 101
	os_tid = 0x118


Thread:
	id = 102
	os_tid = 0xf0


Thread:
	id = 115
	os_tid = 0x310


Process:
	id = "7"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x47738000"
	os_pid = "0x7c4"
	os_integrity_level = "0x4000"
	os_privileges = "0x60814080"
	monitor_reason = "rpc_server"
	parent_id = "5"
	os_parent_pid = "0x1d8"
	cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0005d0e3" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 104
	os_tid = 0x7b0


Thread:
	id = 105
	os_tid = 0x340


Thread:
	id = 106
	os_tid = 0x408


Thread:
	id = 107
	os_tid = 0x600


Thread:
	id = 108
	os_tid = 0x55c


Thread:
	id = 109
	os_tid = 0x490


Thread:
	id = 110
	os_tid = 0x978